{"level":"info","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Operator Version: 0.0.1"} {"level":"info","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Go Version: go1.25.8 (Red Hat 1.25.8-1.module+el8.10.0+24168+9fd3a552) X:strictfipsruntime"} {"level":"info","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Go OS/Arch: linux/amd64"} {"level":"info","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Setting Up Manager"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Load KubeConfig"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Initialize Manager"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Initialize Scheme"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Getting Manager Options"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Adding Healthz and Readyz checks"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Registering Components"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Initialize Prometheus Registry"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Initialize Prometheus metrics endpoint","endpoint":"http://0.0.0.0:8383/metrics"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Initialize ConfigMap watcher"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Initialize Validation Engine"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Initialize Reconciler"} {"level":"info","ts":"2026-05-13T18:31:12Z","logger":"DeploymentValidation","msg":"Starting Manager"} {"level":"info","ts":"2026-05-13T18:31:12Z","msg":"starting server","name":"health probe","addr":"[::]:8081"} {"level":"info","ts":"2026-05-13T18:31:12Z","logger":"ConfigMapWatcher","msg":"a ConfigMap has been created under watched namespace","name":"deployment-validation-operator-config","namespace":"openshift-deployment-validation-operator"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"Current set of enabled checks","checks":"dangling-horizontalpodautoscaler, dangling-ingress, dangling-networkpolicy, dangling-networkpolicypeer-podselector, dangling-service, dangling-servicemonitor, dnsconfig-options, duplicate-env-var, env-value-from, host-ipc, host-network, host-pid, hpa-minimum-three-replicas, invalid-target-ports, job-ttl-seconds-after-finished, liveness-port, minimum-three-replicas, no-anti-affinity, no-node-affinity, non-existent-service-account, non-isolated-pod, pdb-max-unavailable, pdb-min-available, pdb-unhealthy-pod-eviction-policy, priority-class-name, privilege-escalation-container, privileged-container, readiness-port, restart-policy, run-as-non-root, scc-deny-privileged-container, schema-validation, sorted-keys, startup-port, unsafe-sysctls, unset-cpu-requirements, unset-memory-requirements"} {"level":"info","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"The ConfigMap has been updated"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:31:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:31:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:31:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:33:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:33:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:33:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:35:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:35:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:35:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:37:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager\" not found"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-cainjector\" not found"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-webhook\" not found"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"info","ts":"2026-05-13T18:37:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:37:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-infrastructure,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-infrastructure,helm.sh/chart=tsf-infrastructure-0.1.0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"test-tpa-pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"test-keycloak-pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-infrastructure\" not found"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-tpa-pgsql-bee\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-keycloak-pgsql-bee\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-tpa-pgsql-bee\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-keycloak-pgsql-bee\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-tpa-pgsql-bee\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-keycloak-pgsql-bee\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-13T18:37:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:37:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:37:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:37:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:37:14.594342 1 request.go:752] "Waited before sending request" delay="1.130146171s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjIxMjAsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-13T18:37:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtpa-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:37:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:37:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:37:22Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:37:26.594650 1 request.go:752] "Waited before sending request" delay="1.997513521s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjIzNjYsInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"info","ts":"2026-05-13T18:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhbk-operator\" not found"} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"info","ts":"2026-05-13T18:37:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager-metrics-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[control-plane:controller-manager])"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager-metrics-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[control-plane:controller-manager])"} {"level":"debug","ts":"2026-05-13T18:37:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"info","ts":"2026-05-13T18:37:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:37:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"info","ts":"2026-05-13T18:37:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:39:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:39:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:39:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:39:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:39:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:39:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:39:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:39:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:39:14.497964 1 request.go:752] "Waited before sending request" delay="1.28190239s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjQ5ODksInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T18:39:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-logserver\" not found"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logserver\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logserver\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logserver\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logsigner\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/instance=tsf-tas,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-tas,app.kubernetes.io/version=1.3,helm.sh/chart=tsf-tas-0.1.0"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"test-tsf-tas","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"statefulsets-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:39:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:39:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:39:20Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:39:24.498778 1 request.go:752] "Waited before sending request" delay="1.996086204s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjUwOTUsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app:keycloak app.kubernetes.io/instance:keycloak app.kubernetes.io/managed-by:keycloak-operator])"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:24Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-13T18:39:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:39:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:39:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:39:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:39:36.498621 1 request.go:752] "Waited before sending request" delay="1.997190413s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjUzNDcsInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T18:39:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:41:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"info","ts":"2026-05-13T18:41:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"info","ts":"2026-05-13T18:41:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"info","ts":"2026-05-13T18:41:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:41:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T18:41:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:41:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:41:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T18:41:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-service-controller-manager\" not found"} {"level":"debug","ts":"2026-05-13T18:41:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:41:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T18:41:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:41:14.513589 1 request.go:752] "Waited before sending request" delay="1.365546674s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjg2OTEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:41:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T18:41:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:14Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-13T18:41:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:41:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:41:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:41:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:41:22Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:41:24.513936 1 request.go:752] "Waited before sending request" delay="1.879781364s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjg4MTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:41:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:41:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:41:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:41:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"info","ts":"2026-05-13T18:41:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:41:36.514605 1 request.go:752] "Waited before sending request" delay="1.994964275s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjg5MzEsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"integration-service-controller-manager\" not found"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:41:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T18:41:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[apps:namespace-lister])"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[apps:namespace-lister] []}) "} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app=proxy)"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-to-apiserver","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[apps:namespace-lister] []}) "} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"namespace-lister\" not found"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"namespace-lister\" not found"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app=proxy)"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"namespace-lister\" not found"} {"level":"debug","ts":"2026-05-13T18:41:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app=proxy)"} {"level":"info","ts":"2026-05-13T18:41:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:41:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:41:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-pipelines\" not found"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"tekton-chains-cosign\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tekton-chains-cosign\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tekton-chains-cosign\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T18:41:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-13T18:41:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:41:48.514680 1 request.go:752] "Waited before sending request" delay="1.996055545s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjkwNzgsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":1,"labels":"app.kubernetes.io/instance=tsf-konflux,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-konflux,app.kubernetes.io/version=0.1,helm.sh/chart=tsf-konflux-0.1.0"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-konflux\" not found"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"konflux-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"konflux-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"konflux-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app:dex])"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"konflux-ui","kind":"Ingress","validation":"dangling-ingress","check_description":"Indicates when ingress do not have any associated services.","check_remediation":"Confirm that your ingress's backend correctly matches the name and port on one of your services.","check_failure_reason":"no service found matching ingress label (proxy), port web-tls"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"dex\" not found"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:41:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T18:41:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-mcj65\""} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-logsigner\" not found"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logsigner\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tuf-repository-init\" not found"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-s85rj","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-s85rj","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-s85rj","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-s85rj","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"ctlog-createtree-job\" not found"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-s85rj","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-s85rj","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-s85rj","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-s85rj","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tuf-repository-init\" not found"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-tsctd","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"ctlog\" not found"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"ctlog\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-s8jp6","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-s8jp6","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-s8jp6","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-s8jp6","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-createtree-job\" not found"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-s8jp6","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-s8jp6","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-s8jp6","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-s8jp6","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-redis\" is referring to an unknown secret \"redis-password-trusted-artifact-signerpxnx5\""} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-redis\" not found"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"enable-tls\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-redis\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-ui\" not found"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-search-ui\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-search-ui\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-search-ui\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-server\" is referring to an unknown secret \"redis-password-trusted-artifact-signerpxnx5\""} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor\" not found"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:41:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:41:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"image-pruner\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"image-pruner\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"notification-resetter\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"notification-resetter\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"image-controller-controller-manager\" not found"} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:41:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T18:41:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:42:00.514132 1 request.go:752] "Waited before sending request" delay="1.996659906s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjkyMTEsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-service-controller-manager\" not found"} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-webhook-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[control-plane:controller-manager])"} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:42:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T18:42:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:42:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:42:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T18:42:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:42:10.514279 1 request.go:752] "Waited before sending request" delay="1.994899219s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjkzMjIsInN0YXJ0IjoiL3JodHBhLW9wZXJhdG9yLWJpbmQtam9iXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=0b610f9f-fafd-4d34-8b2e-ecc9170a99bb,batch.kubernetes.io/job-name=create-importers,controller-uid=0b610f9f-fafd-4d34-8b2e-ecc9170a99bb,job-name=create-importers"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=3daf48c1-9f88-408a-ae7c-9fc0f3f3e4f0,batch.kubernetes.io/job-name=create-db,controller-uid=3daf48c1-9f88-408a-ae7c-9fc0f3f3e4f0,job-name=create-db"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=3ac72936-b224-46a7-8eae-483f5bec530a,batch.kubernetes.io/job-name=migrate-db,controller-uid=3ac72936-b224-46a7-8eae-483f5bec530a,job-name=migrate-db"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:42:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:42:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:42:14Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:43:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T18:43:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T18:43:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T18:43:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:43:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:43:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:43:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:43:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:43:14.501294 1 request.go:752] "Waited before sending request" delay="1.255393365s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzAyMTAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:43:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:43:16Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T18:43:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T18:43:20Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:43:24.501326 1 request.go:752] "Waited before sending request" delay="1.996513727s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzAyODksInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:43:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:43:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:43:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:43:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:43:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:43:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:43:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T18:43:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:43:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T18:43:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T18:43:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T18:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T18:43:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:43:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:43:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T18:43:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T18:43:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T18:43:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T18:43:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:43:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T18:43:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:43:36.501591 1 request.go:752] "Waited before sending request" delay="1.830252737s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA0NTgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:43:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T18:43:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:43:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:43:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:43:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:43:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:43:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:43:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T18:43:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T18:43:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:43:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:43:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:43:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:43:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:43:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:43:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T18:43:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:43:48.501959 1 request.go:752] "Waited before sending request" delay="1.884938827s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA1ODgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-13T18:43:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:43:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T18:43:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=3daf48c1-9f88-408a-ae7c-9fc0f3f3e4f0,batch.kubernetes.io/job-name=create-db,controller-uid=3daf48c1-9f88-408a-ae7c-9fc0f3f3e4f0,job-name=create-db"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=0b610f9f-fafd-4d34-8b2e-ecc9170a99bb,batch.kubernetes.io/job-name=create-importers,controller-uid=0b610f9f-fafd-4d34-8b2e-ecc9170a99bb,job-name=create-importers"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=3ac72936-b224-46a7-8eae-483f5bec530a,batch.kubernetes.io/job-name=migrate-db,controller-uid=3ac72936-b224-46a7-8eae-483f5bec530a,job-name=migrate-db"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:43:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:43:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:44:00.500971 1 request.go:752] "Waited before sending request" delay="1.996243406s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA3MDUsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T18:44:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:44:04Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:44:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T18:44:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T18:44:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:44:12.501325 1 request.go:752] "Waited before sending request" delay="1.996648282s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA4NDIsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:44:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T18:44:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T18:44:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:44:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T18:44:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T18:44:16Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:45:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T18:45:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T18:45:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T18:45:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:45:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T18:45:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T18:45:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:45:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T18:45:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:45:14.483415 1 request.go:752] "Waited before sending request" delay="1.275168938s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE1ODQsInN0YXJ0IjoiL3Jla29yLWNyZWF0ZXRyZWUtam9iXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:45:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:45:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T18:45:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:45:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:45:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:45:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:45:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:45:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:45:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T18:45:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:45:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:45:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:45:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:45:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:45:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:45:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T18:45:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T18:45:22Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:45:24.483477 1 request.go:752] "Waited before sending request" delay="1.889063321s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE3MDQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-13T18:45:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:45:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T18:45:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=3ac72936-b224-46a7-8eae-483f5bec530a,batch.kubernetes.io/job-name=migrate-db,controller-uid=3ac72936-b224-46a7-8eae-483f5bec530a,job-name=migrate-db"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=3daf48c1-9f88-408a-ae7c-9fc0f3f3e4f0,batch.kubernetes.io/job-name=create-db,controller-uid=3daf48c1-9f88-408a-ae7c-9fc0f3f3e4f0,job-name=create-db"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=0b610f9f-fafd-4d34-8b2e-ecc9170a99bb,batch.kubernetes.io/job-name=create-importers,controller-uid=0b610f9f-fafd-4d34-8b2e-ecc9170a99bb,job-name=create-importers"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:45:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:45:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:45:34.483875 1 request.go:752] "Waited before sending request" delay="1.884506142s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE4MTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T18:45:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:45:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:45:44.483883 1 request.go:752] "Waited before sending request" delay="1.996692403s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE5MDAsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:45:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T18:45:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T18:45:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T18:45:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T18:45:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:45:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T18:45:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T18:45:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:45:56.483770 1 request.go:752] "Waited before sending request" delay="1.996365677s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzIwNDYsInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:45:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T18:45:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:46:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T18:46:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:46:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:46:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:46:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:46:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:46:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:46:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T18:46:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:46:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T18:46:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T18:46:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:46:06.485204 1 request.go:752] "Waited before sending request" delay="1.998055272s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzIxNTQsInN0YXJ0IjoiL3JoYmstb3BlcmF0b3IudjI2LjQuMTEtb3ByLjJcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:46:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:46:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:46:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:46:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:46:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:46:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:46:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:46:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:46:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:46:16Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:47:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T18:47:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T18:47:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:47:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:47:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T18:47:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:47:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:47:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:47:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:47:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:47:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:47:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T18:47:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T18:47:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:47:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:47:14.478581 1 request.go:752] "Waited before sending request" delay="1.261285166s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzI5NTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:47:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T18:47:16Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=3daf48c1-9f88-408a-ae7c-9fc0f3f3e4f0,batch.kubernetes.io/job-name=create-db,controller-uid=3daf48c1-9f88-408a-ae7c-9fc0f3f3e4f0,job-name=create-db"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=0b610f9f-fafd-4d34-8b2e-ecc9170a99bb,batch.kubernetes.io/job-name=create-importers,controller-uid=0b610f9f-fafd-4d34-8b2e-ecc9170a99bb,job-name=create-importers"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=3ac72936-b224-46a7-8eae-483f5bec530a,batch.kubernetes.io/job-name=migrate-db,controller-uid=3ac72936-b224-46a7-8eae-483f5bec530a,job-name=migrate-db"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:47:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:47:20Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:47:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:47:26.479424 1 request.go:752] "Waited before sending request" delay="1.89094153s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/managed-tenant-60swj/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzMwOTcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T18:47:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T18:47:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T18:47:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T18:47:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T18:47:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:47:38.478546 1 request.go:752] "Waited before sending request" delay="1.894693486s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzMyMjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:47:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T18:47:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T18:47:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:47:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T18:47:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:47:48.479173 1 request.go:752] "Waited before sending request" delay="1.997062016s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzMzMTcsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:47:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T18:47:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:47:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:47:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:47:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:47:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:47:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:47:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T18:47:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T18:47:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T18:47:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:47:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:47:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:47:58.479278 1 request.go:752] "Waited before sending request" delay="1.997048803s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM0MzYsInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:47:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:47:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:48:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:48:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:48:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:48:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:48:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:48:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:48:04Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:48:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T18:48:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T18:48:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:48:10.478700 1 request.go:752] "Waited before sending request" delay="1.888648348s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM1ODksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:48:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T18:48:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:48:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T18:48:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:48:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:48:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:48:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:48:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:48:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:48:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T18:48:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:48:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T18:48:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:48:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:48:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:48:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:48:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T18:48:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:48:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:48:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:48:16Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:49:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T18:49:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T18:49:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T18:49:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:49:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T18:49:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T18:49:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T18:49:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:49:14.492162 1 request.go:752] "Waited before sending request" delay="1.266945348s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQzMzIsInN0YXJ0IjoiL3Jla29yLWNyZWF0ZXRyZWUtam9iXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:49:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:49:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T18:49:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:49:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:49:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:49:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:49:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:49:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:49:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T18:49:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T18:49:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:49:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:49:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:49:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:49:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:49:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:49:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T18:49:22Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:49:24.492275 1 request.go:752] "Waited before sending request" delay="1.892769609s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ0MzcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-13T18:49:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:49:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T18:49:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=3ac72936-b224-46a7-8eae-483f5bec530a,batch.kubernetes.io/job-name=migrate-db,controller-uid=3ac72936-b224-46a7-8eae-483f5bec530a,job-name=migrate-db"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=3daf48c1-9f88-408a-ae7c-9fc0f3f3e4f0,batch.kubernetes.io/job-name=create-db,controller-uid=3daf48c1-9f88-408a-ae7c-9fc0f3f3e4f0,job-name=create-db"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=0b610f9f-fafd-4d34-8b2e-ecc9170a99bb,batch.kubernetes.io/job-name=create-importers,controller-uid=0b610f9f-fafd-4d34-8b2e-ecc9170a99bb,job-name=create-importers"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:49:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:49:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:49:34.492308 1 request.go:752] "Waited before sending request" delay="1.889620287s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ1NTAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T18:49:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:49:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:49:44.492551 1 request.go:752] "Waited before sending request" delay="1.996560502s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ2NDMsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:49:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T18:49:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T18:49:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T18:49:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T18:49:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:49:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T18:49:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T18:49:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:49:56.493076 1 request.go:752] "Waited before sending request" delay="1.997050207s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ3NzksInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:49:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T18:49:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:50:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T18:50:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:50:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:50:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:50:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:50:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:50:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:50:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T18:50:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:50:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T18:50:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T18:50:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:50:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:50:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:50:08.492216 1 request.go:752] "Waited before sending request" delay="1.885575014s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ5NzEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:50:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:50:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:50:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:50:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:50:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:50:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:50:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:50:16Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:51:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T18:51:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T18:51:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:51:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:51:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T18:51:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T18:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T18:51:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:51:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:51:14.490608 1 request.go:752] "Waited before sending request" delay="1.182976433s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYwNjYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:51:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T18:51:16Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:51:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:51:20Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:51:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:51:26.491208 1 request.go:752] "Waited before sending request" delay="1.817874256s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/managed-tenant-60swj/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYyNjEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T18:51:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"info","ts":"2026-05-13T18:51:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T18:51:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T18:51:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:51:38.491650 1 request.go:752] "Waited before sending request" delay="1.892952103s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzY0NTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:51:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T18:51:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T18:51:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:51:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T18:51:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T18:51:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:51:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:51:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:51:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:51:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:51:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:51:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T18:51:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:51:50.490677 1 request.go:752] "Waited before sending request" delay="1.891062909s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzY2MTMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:51:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T18:51:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T18:51:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:51:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:51:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:51:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:51:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:52:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:52:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:52:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:52:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:52:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:52:02.489740 1 request.go:752] "Waited before sending request" delay="1.880589726s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzY3NTEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:52:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:52:04Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:52:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T18:52:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T18:52:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:52:12.490139 1 request.go:752] "Waited before sending request" delay="1.996718582s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzY4MzksInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:52:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T18:52:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:52:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:52:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:52:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:52:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:52:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:52:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:52:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T18:52:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T18:52:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:52:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T18:52:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:52:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:52:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:52:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:52:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T18:52:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:52:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:52:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:52:16Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:53:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:53:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T18:53:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T18:53:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:53:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T18:53:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:53:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T18:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T18:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T18:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T18:53:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:53:14.491069 1 request.go:752] "Waited before sending request" delay="1.220393813s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc2NDIsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T18:53:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T18:53:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T18:53:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:53:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:53:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T18:53:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:53:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:53:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:53:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:53:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:53:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:53:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T18:53:22Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:53:24.491103 1 request.go:752] "Waited before sending request" delay="1.861633233s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc3NDIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T18:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T18:53:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:53:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:53:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T18:53:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:53:34.491617 1 request.go:752] "Waited before sending request" delay="1.855662109s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzgwOTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:53:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:53:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:53:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:53:46.492232 1 request.go:752] "Waited before sending request" delay="1.842891501s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzgzMDYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T18:53:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T18:53:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:53:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T18:53:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T18:53:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:53:56.492680 1 request.go:752] "Waited before sending request" delay="1.997049791s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzgzOTQsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:53:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T18:53:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T18:53:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:54:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T18:54:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:54:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:54:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:54:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T18:54:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:54:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:54:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:54:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:54:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T18:54:04Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:54:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T18:54:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T18:54:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:54:08.491609 1 request.go:752] "Waited before sending request" delay="1.865532302s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg1NjUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:54:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:54:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:54:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:54:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:54:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:54:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:54:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:54:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:54:16Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:55:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:55:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:55:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:55:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:55:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:55:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T18:55:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T18:55:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:55:14.502576 1 request.go:752] "Waited before sending request" delay="1.370552123s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzkzOTUsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:55:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T18:55:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:55:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T18:55:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:55:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:55:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:55:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:55:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:55:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:55:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T18:55:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:55:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:55:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:55:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:55:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T18:55:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T18:55:16Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:55:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:55:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T18:55:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T18:55:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T18:55:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T18:55:20Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:55:24.502659 1 request.go:752] "Waited before sending request" delay="1.996680254s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk1MjAsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:55:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T18:55:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:55:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T18:55:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:55:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:55:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:55:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:55:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:55:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:55:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T18:55:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:55:36.502748 1 request.go:752] "Waited before sending request" delay="1.997050196s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk2NTQsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:55:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T18:55:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:55:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:55:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:55:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:55:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:55:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:55:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T18:55:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:55:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:55:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T18:55:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:55:46.503651 1 request.go:752] "Waited before sending request" delay="1.99507323s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk3NzMsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:55:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:55:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:55:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:55:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:55:58.503630 1 request.go:752] "Waited before sending request" delay="1.995013884s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDAxMDAsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clamav-scan,tekton.dev/taskRunUID=e6fca190-d216-468e-83f5-f7bcefd9d95c"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check,tekton.dev/taskRunUID=ba1ac0ee-dd4d-40b4-9fec-3391a4b98b8d"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-check-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-shell-check,tekton.dev/taskRunUID=6c2e4e7e-f492-4c41-8a95-c814b4f6d780"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-shell-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-tpa-scan,tekton.dev/taskRunUID=815bd1be-cd16-47b1-a7fe-70a5988a288c"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-image-index,tekton.dev/taskRunUID=94f34e48-cd06-4834-b608-4b0f6fee1d96"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-rpms-signature-scan,tekton.dev/taskRunUID=73c1ecba-6f1b-474c-83c3-e6c3c8449293"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-rpms-signature-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-output-results\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-unicode-check,tekton.dev/taskRunUID=5e2eca76-6c9b-4990-bc0f-ecf265a273bf"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T18:55:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T18:55:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:56:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T18:56:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T18:56:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:56:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T18:56:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T18:56:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:56:10.502717 1 request.go:752] "Waited before sending request" delay="1.994206776s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDAyNjQsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:56:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T18:56:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:56:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:56:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:56:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:56:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:56:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:56:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:56:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T18:56:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T18:56:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:56:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T18:56:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T18:56:16Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:57:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:57:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:57:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:57:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:57:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T18:57:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T18:57:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:57:14.491106 1 request.go:752] "Waited before sending request" delay="1.363620127s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDEwNjksInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-13T18:57:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T18:57:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:57:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:57:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:57:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:57:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:57:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:57:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:57:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T18:57:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T18:57:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:57:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:57:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T18:57:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:57:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:57:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T18:57:16Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:57:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:57:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T18:57:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T18:57:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T18:57:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T18:57:20Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T18:57:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T18:57:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:57:26.490831 1 request.go:752] "Waited before sending request" delay="1.789185048s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDEyNTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:57:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:57:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T18:57:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:57:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:57:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:57:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:57:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:57:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:57:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T18:57:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:57:36.491602 1 request.go:752] "Waited before sending request" delay="1.994634565s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDEzNDEsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:57:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T18:57:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:57:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:57:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:57:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:57:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:57:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:57:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T18:57:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:57:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T18:57:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:57:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:57:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:57:48.491743 1 request.go:752] "Waited before sending request" delay="1.866929477s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE2MDEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T18:57:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:57:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-image-index,tekton.dev/taskRunUID=94f34e48-cd06-4834-b608-4b0f6fee1d96"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check,tekton.dev/taskRunUID=ba1ac0ee-dd4d-40b4-9fec-3391a4b98b8d"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-check-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-rpms-signature-scan,tekton.dev/taskRunUID=73c1ecba-6f1b-474c-83c3-e6c3c8449293"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-rpms-signature-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-output-results\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-shell-check,tekton.dev/taskRunUID=6c2e4e7e-f492-4c41-8a95-c814b4f6d780"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-shell-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-tpa-scan,tekton.dev/taskRunUID=815bd1be-cd16-47b1-a7fe-70a5988a288c"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75857262637,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-5495c-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-5495c,pac.test.appstudio.openshift.io/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-otzi-cqmnk,tekton.dev/pipelineRunUID=58176800-3c1d-4086-933b-0448809fe9cc,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-otzi-cqmnk-collect-keyless-params,tekton.dev/taskRunUID=96333976-ca1f-45d7-85bc-0e39de490a97,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778698662,test.appstudio.openshift.io/scenario=my-integration-test-otzi,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clamav-scan,tekton.dev/taskRunUID=e6fca190-d216-468e-83f5-f7bcefd9d95c"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-unicode-check,tekton.dev/taskRunUID=5e2eca76-6c9b-4990-bc0f-ecf265a273bf"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-5495c\" not found"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-unicode-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-5495c-on-push-ntxps-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T18:57:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T18:57:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:58:00.490738 1 request.go:752] "Waited before sending request" delay="1.877879643s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE3ODgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:58:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T18:58:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T18:58:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:58:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T18:58:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T18:58:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:58:10.491060 1 request.go:752] "Waited before sending request" delay="1.992111054s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE5NDUsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T18:58:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T18:58:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:58:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T18:58:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:58:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:58:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:58:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:58:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T18:58:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T18:58:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T18:58:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:58:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T18:58:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T18:58:16Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T18:59:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T18:59:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T18:59:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T18:59:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T18:59:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T18:59:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T18:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T18:59:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:59:14.508162 1 request.go:752] "Waited before sending request" delay="1.151236817s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDMyNjYsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:59:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:59:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:59:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:59:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:59:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T18:59:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:59:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T18:59:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T18:59:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T18:59:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T18:59:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T18:59:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:59:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:59:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T18:59:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T18:59:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T18:59:16Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T18:59:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T18:59:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T18:59:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T18:59:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T18:59:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T18:59:20Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:59:24.508570 1 request.go:752] "Waited before sending request" delay="1.99412867s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM0MTUsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T18:59:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T18:59:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T18:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T18:59:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T18:59:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:59:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:59:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:59:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:59:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T18:59:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T18:59:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T18:59:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:59:34.508721 1 request.go:752] "Waited before sending request" delay="1.858904175s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM2NzIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:59:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T18:59:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:59:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:59:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:59:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:59:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T18:59:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T18:59:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T18:59:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:59:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T18:59:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T18:59:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:59:46.509220 1 request.go:752] "Waited before sending request" delay="1.997048006s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM4ODYsInN0YXJ0IjoiL3JodHBhLW9wZXJhdG9yLWJpbmQtam9iXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T18:59:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T18:59:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T18:59:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-23e6e5ea92,apps.kubernetes.io/pod-index=0,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,controller-revision-hash=affinity-assistant-23e6e5ea92-57d76ddb4b,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,statefulset.kubernetes.io/pod-name=affinity-assistant-23e6e5ea92-0,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"affinity-assistant-23e6e5ea92","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"affinity-assistant-23e6e5ea92","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"affinity-assistant-23e6e5ea92","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"affinity-assistant-23e6e5ea92","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"affinity-assistant-23e6e5ea92","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=collect-registry-token-secret,tekton.dev/task=collect-registry-token-secret,tekton.dev/taskRun=managed-kn6nf-collect-registry-token-secret,tekton.dev/taskRunUID=172d8d12-5818-46f2-8a8d-9f605eb9b6c4"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-registry-token-secret-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-registry-token-secret-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-registry-token-secret-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-registry-token-secret-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-registry-token-secret-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=collect-signing-params,tekton.dev/task=collect-signing-params,tekton.dev/taskRun=managed-kn6nf-collect-signing-params,tekton.dev/taskRunUID=b649f253-52d7-422a-ba4b-eca39ecde5d4"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-signing-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-signing-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-signing-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-signing-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-signing-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-signing-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-signing-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-signing-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-signing-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=filter-already-released-images,tekton.dev/task=filter-already-released-images,tekton.dev/taskRun=managed-kn6nf-filter-already-released-images,tekton.dev/taskRunUID=ee453964-e1f7-4fe4-893b-d78c782d3f01"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=reduce-snapshot,tekton.dev/task=reduce-snapshot,tekton.dev/taskRun=managed-kn6nf-reduce-snapshot,tekton.dev/taskRunUID=3fdd0f8e-aa9a-49c7-a450-adeb1e39fc09"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-reduce-snapshot-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-reduce-snapshot-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-reduce-snapshot-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-reduce-snapshot-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-reduce-snapshot-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-reduce-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-reduce-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-reduce-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-reduce-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-23e6e5ea92,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=apply-mapping,tekton.dev/task=apply-mapping,tekton.dev/taskRun=managed-kn6nf-apply-mapping,tekton.dev/taskRunUID=6c5c16e5-1d15-4398-ad95-dade8eed50a0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-apply-mapping-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-apply-mapping-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-apply-mapping-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-apply-mapping-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-apply-mapping-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-apply-mapping-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-apply-mapping-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-apply-mapping-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-apply-mapping-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=check-data-keys,tekton.dev/task=check-data-keys,tekton.dev/taskRun=managed-kn6nf-check-data-keys,tekton.dev/taskRunUID=3f4b8c0a-5874-472a-8897-125aff4e9f2d"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-check-data-keys-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-check-data-keys-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-check-data-keys-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-check-data-keys-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-check-data-keys-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-check-data-keys-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-check-data-keys-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-check-data-keys-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-check-data-keys-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=collect-data,tekton.dev/taskRun=managed-kn6nf-collect-data,tekton.dev/taskRunUID=5d1ac522-2905-4a7e-aba2-767100665e2b"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-data-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-data-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-data-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-data-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-data-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-data-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-data-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-data-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-data-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=collect-task-params,tekton.dev/taskRun=managed-kn6nf-collect-task-params,tekton.dev/taskRunUID=a952936e-75fd-4e03-94d1-44ac0816b63d"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-task-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-task-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-task-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-task-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-task-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-task-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-task-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-task-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-task-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=verify-access-to-resources,tekton.dev/task=verify-access-to-resources,tekton.dev/taskRun=managed-kn6nf-verify-access-to-resources,tekton.dev/taskRunUID=9228c582-c594-4f79-8e4f-066f4a48014a"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-access-to-resources-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-access-to-resources-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-access-to-resources-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-access-to-resources-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-access-to-resources-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-access-to-resources-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-access-to-resources-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-access-to-resources-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-access-to-resources-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"info","ts":"2026-05-13T18:59:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 18:59:58.508608 1 request.go:752] "Waited before sending request" delay="1.996328287s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQyMjksInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-tpa-scan,tekton.dev/taskRunUID=815bd1be-cd16-47b1-a7fe-70a5988a288c"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75857262637,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-5495c-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-5495c,pac.test.appstudio.openshift.io/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-otzi-cqmnk,tekton.dev/pipelineRunUID=58176800-3c1d-4086-933b-0448809fe9cc,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-otzi-cqmnk-collect-keyless-params,tekton.dev/taskRunUID=96333976-ca1f-45d7-85bc-0e39de490a97,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778698662,test.appstudio.openshift.io/scenario=my-integration-test-otzi,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75857262637,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-5495c-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-5495c,pac.test.appstudio.openshift.io/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-otzi-cqmnk,tekton.dev/pipelineRunUID=58176800-3c1d-4086-933b-0448809fe9cc,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=my-integration-test-otzi-cqmnk-verify,tekton.dev/taskRunUID=dbddda7f-25ec-48f9-8a76-ae397b1de652,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778698662,test.appstudio.openshift.io/scenario=my-integration-test-otzi,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-otzi-cqmnk-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-rpms-signature-scan,tekton.dev/taskRunUID=73c1ecba-6f1b-474c-83c3-e6c3c8449293"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-unicode-check,tekton.dev/taskRunUID=5e2eca76-6c9b-4990-bc0f-ecf265a273bf"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-image-index,tekton.dev/taskRunUID=94f34e48-cd06-4834-b608-4b0f6fee1d96"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clamav-scan,tekton.dev/taskRunUID=e6fca190-d216-468e-83f5-f7bcefd9d95c"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check,tekton.dev/taskRunUID=ba1ac0ee-dd4d-40b4-9fec-3391a4b98b8d"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-shell-check,tekton.dev/taskRunUID=6c2e4e7e-f492-4c41-8a95-c814b4f6d780"} {"level":"debug","ts":"2026-05-13T18:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T18:59:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:00:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T19:00:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T19:00:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:00:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T19:00:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T19:00:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:00:08.508908 1 request.go:752] "Waited before sending request" delay="1.870924851s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ1NzYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:00:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T19:00:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:00:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:00:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:00:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:00:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:00:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T19:00:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:00:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:00:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T19:00:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:00:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,batch.kubernetes.io/job-name=segment-bridge-29644980,controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,job-name=segment-bridge-29644980"} {"level":"debug","ts":"2026-05-13T19:00:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T19:00:16Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:00:16Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:00:16Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-13T19:00:16Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T19:01:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T19:01:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T19:01:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T19:01:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:01:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T19:01:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T19:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T19:01:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T19:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T19:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T19:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T19:01:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:01:14.556793 1 request.go:752] "Waited before sending request" delay="1.180948412s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU0ODIsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T19:01:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T19:01:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:01:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T19:01:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:01:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:01:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:01:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:01:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T19:01:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:01:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:01:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T19:01:22Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:01:26.557132 1 request.go:752] "Waited before sending request" delay="1.996817247s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU2NzQsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T19:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T19:01:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T19:01:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T19:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T19:01:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:01:36.558275 1 request.go:752] "Waited before sending request" delay="1.997047189s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU3ODgsInN0YXJ0IjoiL3JodHBhLW9wZXJhdG9yLWJpbmQtam9iXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T19:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T19:01:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T19:01:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=verify-access-to-resources,tekton.dev/task=verify-access-to-resources,tekton.dev/taskRun=managed-kn6nf-verify-access-to-resources,tekton.dev/taskRunUID=9228c582-c594-4f79-8e4f-066f4a48014a"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-23e6e5ea92,apps.kubernetes.io/pod-index=0,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,controller-revision-hash=affinity-assistant-23e6e5ea92-57d76ddb4b,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,statefulset.kubernetes.io/pod-name=affinity-assistant-23e6e5ea92-0,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=push-snapshot,tekton.dev/task=push-snapshot,tekton.dev/taskRun=managed-kn6nf-push-snapshot,tekton.dev/taskRunUID=825f0ffe-b437-48ab-aeb1-7797aa7f7bff"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-push-snapshot-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-push-snapshot-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-push-snapshot-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-push-snapshot-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-push-snapshot-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-push-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-push-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-push-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-push-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-23e6e5ea92,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=collect-registry-token-secret,tekton.dev/task=collect-registry-token-secret,tekton.dev/taskRun=managed-kn6nf-collect-registry-token-secret,tekton.dev/taskRunUID=172d8d12-5818-46f2-8a8d-9f605eb9b6c4"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=collect-signing-params,tekton.dev/task=collect-signing-params,tekton.dev/taskRun=managed-kn6nf-collect-signing-params,tekton.dev/taskRunUID=b649f253-52d7-422a-ba4b-eca39ecde5d4"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=filter-already-released-images,tekton.dev/task=filter-already-released-images,tekton.dev/taskRun=managed-kn6nf-filter-already-released-images,tekton.dev/taskRunUID=ee453964-e1f7-4fe4-893b-d78c782d3f01"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-filter-already-released-images-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=collect-tpa-params,tekton.dev/task=collect-tpa-params,tekton.dev/taskRun=managed-kn6nf-collect-tpa-params,tekton.dev/taskRunUID=1ed97e88-a536-40d2-9e26-61db292470fd"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-tpa-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-tpa-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-tpa-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-tpa-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-tpa-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-tpa-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-tpa-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-tpa-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-collect-tpa-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=reduce-snapshot,tekton.dev/task=reduce-snapshot,tekton.dev/taskRun=managed-kn6nf-reduce-snapshot,tekton.dev/taskRunUID=3fdd0f8e-aa9a-49c7-a450-adeb1e39fc09"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=sign-image-cosign-keyless,tekton.dev/task=sign-image-cosign-keyless,tekton.dev/taskRun=managed-kn6nf-sign-image-cosign-keyless,tekton.dev/taskRunUID=68f9d130-5aec-455b-bad8-b76b3feddd10"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-sign-image-cosign-keyless-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-sign-image-cosign-keyless-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-sign-image-cosign-keyless-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-sign-image-cosign-keyless-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-sign-image-cosign-keyless-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=verify-conforma,tekton.dev/task=verify-conforma-konflux-ta,tekton.dev/taskRun=managed-kn6nf-verify-conforma,tekton.dev/taskRunUID=7e073ff6-caf9-4388-94d5-8a0d39c45762"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-initialize-tuf\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-reduce\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-report-json\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-summary\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-version\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-show-config\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-assert\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-initialize-tuf\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-reduce\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-report-json\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-summary\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-version\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-show-config\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-60swj","object":"managed-kn6nf-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-assert\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=apply-mapping,tekton.dev/task=apply-mapping,tekton.dev/taskRun=managed-kn6nf-apply-mapping,tekton.dev/taskRunUID=6c5c16e5-1d15-4398-ad95-dade8eed50a0"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=check-data-keys,tekton.dev/task=check-data-keys,tekton.dev/taskRun=managed-kn6nf-check-data-keys,tekton.dev/taskRunUID=3f4b8c0a-5874-472a-8897-125aff4e9f2d"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=collect-data,tekton.dev/taskRun=managed-kn6nf-collect-data,tekton.dev/taskRunUID=5d1ac522-2905-4a7e-aba2-767100665e2b"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-60swj","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260513-185103-000-5f83f12-nqzcz,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-kn6nf,tekton.dev/pipelineRunUID=0f64d9ce-fa57-48ba-b3af-7a213c08cb28,tekton.dev/pipelineTask=collect-task-params,tekton.dev/taskRun=managed-kn6nf-collect-task-params,tekton.dev/taskRunUID=a952936e-75fd-4e03-94d1-44ac0816b63d"} {"level":"debug","ts":"2026-05-13T19:01:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-60swj"} {"level":"info","ts":"2026-05-13T19:01:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:01:48.557445 1 request.go:752] "Waited before sending request" delay="1.996048205s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU5NTcsInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-rpms-signature-scan,tekton.dev/taskRunUID=73c1ecba-6f1b-474c-83c3-e6c3c8449293"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-shell-check,tekton.dev/taskRunUID=6c2e4e7e-f492-4c41-8a95-c814b4f6d780"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-unicode-check,tekton.dev/taskRunUID=5e2eca76-6c9b-4990-bc0f-ecf265a273bf"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75857262637,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-5495c-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-5495c,pac.test.appstudio.openshift.io/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-otzi-cqmnk,tekton.dev/pipelineRunUID=58176800-3c1d-4086-933b-0448809fe9cc,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-otzi-cqmnk-collect-keyless-params,tekton.dev/taskRunUID=96333976-ca1f-45d7-85bc-0e39de490a97,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778698662,test.appstudio.openshift.io/scenario=my-integration-test-otzi,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,appstudio.openshift.io/snapshot=tsf-app-20260513-185103-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75857262637,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-5495c-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-5495c,pac.test.appstudio.openshift.io/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-otzi-cqmnk,tekton.dev/pipelineRunUID=58176800-3c1d-4086-933b-0448809fe9cc,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=my-integration-test-otzi-cqmnk-verify,tekton.dev/taskRunUID=dbddda7f-25ec-48f9-8a76-ae397b1de652,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778698662,test.appstudio.openshift.io/scenario=my-integration-test-otzi,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-tpa-scan,tekton.dev/taskRunUID=815bd1be-cd16-47b1-a7fe-70a5988a288c"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-image-index,tekton.dev/taskRunUID=94f34e48-cd06-4834-b608-4b0f6fee1d96"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clamav-scan,tekton.dev/taskRunUID=e6fca190-d216-468e-83f5-f7bcefd9d95c"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check,tekton.dev/taskRunUID=ba1ac0ee-dd4d-40b4-9fec-3391a4b98b8d"} {"level":"debug","ts":"2026-05-13T19:01:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T19:01:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T19:01:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T19:01:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:01:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T19:01:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T19:01:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:02:00.556639 1 request.go:752] "Waited before sending request" delay="1.996219743s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDYwODcsInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T19:02:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:02:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:02:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:02:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T19:02:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:02:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:02:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:02:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:02:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T19:02:04Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:02:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,batch.kubernetes.io/job-name=segment-bridge-29644980,controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,job-name=segment-bridge-29644980"} {"level":"debug","ts":"2026-05-13T19:02:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T19:02:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T19:02:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:02:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T19:02:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:02:12.556707 1 request.go:752] "Waited before sending request" delay="1.863503864s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDYzMzgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:02:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T19:02:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:02:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T19:02:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:02:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:02:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T19:02:16Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T19:03:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T19:03:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T19:03:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T19:03:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T19:03:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T19:03:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T19:03:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:03:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T19:03:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:03:14.499188 1 request.go:752] "Waited before sending request" delay="1.126893445s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc4NTcsInN0YXJ0IjoiL3Jla29yLWNyZWF0ZXRyZWUtam9iXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:03:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T19:03:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T19:03:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:03:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:03:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:03:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:03:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:03:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:03:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T19:03:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:03:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:03:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:03:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:03:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T19:03:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:03:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:03:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T19:03:22Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T19:03:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:03:26.499097 1 request.go:752] "Waited before sending request" delay="1.861367211s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc5OTIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:03:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T19:03:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T19:03:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:03:36.500147 1 request.go:752] "Waited before sending request" delay="1.997049688s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDgwNzksInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T19:03:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T19:03:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-shell-check,tekton.dev/taskRunUID=6c2e4e7e-f492-4c41-8a95-c814b4f6d780"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-unicode-check,tekton.dev/taskRunUID=5e2eca76-6c9b-4990-bc0f-ecf265a273bf"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-tpa-scan,tekton.dev/taskRunUID=815bd1be-cd16-47b1-a7fe-70a5988a288c"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-image-index,tekton.dev/taskRunUID=94f34e48-cd06-4834-b608-4b0f6fee1d96"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clamav-scan,tekton.dev/taskRunUID=e6fca190-d216-468e-83f5-f7bcefd9d95c"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-rpms-signature-scan,tekton.dev/taskRunUID=73c1ecba-6f1b-474c-83c3-e6c3c8449293"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check,tekton.dev/taskRunUID=ba1ac0ee-dd4d-40b4-9fec-3391a4b98b8d"} {"level":"debug","ts":"2026-05-13T19:03:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T19:03:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T19:03:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T19:03:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:03:48.498587 1 request.go:752] "Waited before sending request" delay="1.99518694s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDgyMjksInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:03:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T19:03:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T19:03:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:03:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T19:03:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:03:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:03:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:03:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:03:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:03:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T19:03:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:03:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:03:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T19:03:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:03:58.499401 1 request.go:752] "Waited before sending request" delay="1.876934992s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDgzNjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:03:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,batch.kubernetes.io/job-name=segment-bridge-29644980,controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,job-name=segment-bridge-29644980"} {"level":"debug","ts":"2026-05-13T19:03:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T19:03:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T19:03:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T19:04:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T19:04:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T19:04:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:04:08.499865 1 request.go:752] "Waited before sending request" delay="1.867924212s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDg0NzgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:04:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:04:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:04:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T19:04:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T19:04:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T19:04:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T19:05:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T19:05:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T19:05:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T19:05:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T19:05:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T19:05:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T19:05:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:05:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T19:05:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:05:14.505322 1 request.go:752] "Waited before sending request" delay="1.078978837s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDkyNzAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-13T19:05:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T19:05:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T19:05:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:05:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T19:05:22Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:05:24.505495 1 request.go:752] "Waited before sending request" delay="1.867485908s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDkzNzgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T19:05:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T19:05:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clamav-scan,tekton.dev/taskRunUID=e6fca190-d216-468e-83f5-f7bcefd9d95c"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check,tekton.dev/taskRunUID=ba1ac0ee-dd4d-40b4-9fec-3391a4b98b8d"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-shell-check,tekton.dev/taskRunUID=6c2e4e7e-f492-4c41-8a95-c814b4f6d780"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-unicode-check,tekton.dev/taskRunUID=5e2eca76-6c9b-4990-bc0f-ecf265a273bf"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-tpa-scan,tekton.dev/taskRunUID=815bd1be-cd16-47b1-a7fe-70a5988a288c"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-image-index,tekton.dev/taskRunUID=94f34e48-cd06-4834-b608-4b0f6fee1d96"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-rpms-signature-scan,tekton.dev/taskRunUID=73c1ecba-6f1b-474c-83c3-e6c3c8449293"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T19:05:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T19:05:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T19:05:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T19:05:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:05:36.506347 1 request.go:752] "Waited before sending request" delay="1.868921567s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk1MTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:05:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T19:05:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T19:05:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:05:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T19:05:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T19:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T19:05:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:05:48.505623 1 request.go:752] "Waited before sending request" delay="1.861885638s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk2NzEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:05:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,batch.kubernetes.io/job-name=segment-bridge-29644980,controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,job-name=segment-bridge-29644980"} {"level":"debug","ts":"2026-05-13T19:05:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"debug","ts":"2026-05-13T19:05:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T19:05:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T19:05:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T19:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T19:05:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T19:05:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:05:58.505790 1 request.go:752] "Waited before sending request" delay="1.888944116s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk3ODAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:05:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T19:05:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:05:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T19:05:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T19:06:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T19:06:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:06:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T19:06:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T19:06:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:06:08.506388 1 request.go:752] "Waited before sending request" delay="1.881938631s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk5MTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:06:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T19:06:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:06:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T19:06:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:06:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:06:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:06:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:06:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:06:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:06:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T19:06:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:06:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:06:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:06:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T19:06:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:06:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:06:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T19:06:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T19:07:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T19:07:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T19:07:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T19:07:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T19:07:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:07:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T19:07:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:07:14.494167 1 request.go:752] "Waited before sending request" delay="1.40228136s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTEwMTQsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T19:07:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-clone-repository,tekton.dev/taskRunUID=71a7c225-1809-48df-8fc3-75c37ac1f8c9"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-image-index,tekton.dev/taskRunUID=94f34e48-cd06-4834-b608-4b0f6fee1d96"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clamav-scan,tekton.dev/taskRunUID=e6fca190-d216-468e-83f5-f7bcefd9d95c"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-rpms-signature-scan,tekton.dev/taskRunUID=73c1ecba-6f1b-474c-83c3-e6c3c8449293"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-unicode-check,tekton.dev/taskRunUID=5e2eca76-6c9b-4990-bc0f-ecf265a273bf"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-tpa-scan,tekton.dev/taskRunUID=815bd1be-cd16-47b1-a7fe-70a5988a288c"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-shell-check,tekton.dev/taskRunUID=6c2e4e7e-f492-4c41-8a95-c814b4f6d780"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-init,tekton.dev/taskRunUID=ada67cd3-229b-4167-9784-de3a07d716b1"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies,tekton.dev/taskRunUID=d070ae6a-da7e-4bb3-806e-fed7f807c125"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check,tekton.dev/taskRunUID=ba1ac0ee-dd4d-40b4-9fec-3391a4b98b8d"} {"level":"debug","ts":"2026-05-13T19:07:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T19:07:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T19:07:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T19:07:22Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:07:24.494803 1 request.go:752] "Waited before sending request" delay="1.859934383s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTEyMjYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T19:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T19:07:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:07:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T19:07:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T19:07:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:07:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:07:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:07:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:07:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:07:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:07:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T19:07:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:07:36.495293 1 request.go:752] "Waited before sending request" delay="1.851902378s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTEzOTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:07:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,batch.kubernetes.io/job-name=segment-bridge-29644980,controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,job-name=segment-bridge-29644980"} {"level":"debug","ts":"2026-05-13T19:07:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T19:07:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T19:07:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:07:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T19:07:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:07:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T19:07:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T19:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T19:07:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:07:48.494860 1 request.go:752] "Waited before sending request" delay="1.817870148s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTE1MzMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T19:07:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T19:07:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T19:07:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T19:07:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:07:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T19:07:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:07:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T19:07:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:07:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:07:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:07:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:07:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:07:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:07:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T19:07:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:08:00.494028 1 request.go:752] "Waited before sending request" delay="1.861983926s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/namespace-lister/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTE2NjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:08:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T19:08:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:08:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:08:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:08:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:08:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T19:08:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:08:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T19:08:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T19:08:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:08:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T19:08:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T19:08:04Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T19:08:04Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T19:08:04Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T19:08:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T19:08:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:08:10.494337 1 request.go:752] "Waited before sending request" delay="1.787831531s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTE3ODAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T19:08:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T19:09:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T19:09:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T19:09:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T19:09:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T19:09:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T19:09:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T19:09:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T19:09:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:09:14.513846 1 request.go:752] "Waited before sending request" delay="1.299604948s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTI1ODksInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:09:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T19:09:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:09:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:09:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:09:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:09:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:09:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:09:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:09:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T19:09:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T19:09:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T19:09:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:09:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:09:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:09:16Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:09:16Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T19:09:16Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T19:09:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T19:09:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T19:09:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T19:09:20Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T19:09:20Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T19:09:20Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:09:24.514176 1 request.go:752] "Waited before sending request" delay="1.994738793s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTI2NzUsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T19:09:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T19:09:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T19:09:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:09:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:09:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:09:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:09:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:09:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:09:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T19:09:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T19:09:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:09:34.514273 1 request.go:752] "Waited before sending request" delay="1.859134475s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTI4MTMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:09:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T19:09:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:09:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:09:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:09:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:09:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:09:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:09:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T19:09:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T19:09:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T19:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T19:09:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:09:46.514977 1 request.go:752] "Waited before sending request" delay="1.997052771s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTI5MjcsInN0YXJ0IjoiL3JodHBhLW9wZXJhdG9yLWJpbmQtam9iXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:09:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T19:09:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T19:09:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-shell-check,tekton.dev/taskRunUID=6c2e4e7e-f492-4c41-8a95-c814b4f6d780"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-tpa-scan,tekton.dev/taskRunUID=815bd1be-cd16-47b1-a7fe-70a5988a288c"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-clone-repository,tekton.dev/taskRunUID=71a7c225-1809-48df-8fc3-75c37ac1f8c9"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-unicode-check,tekton.dev/taskRunUID=5e2eca76-6c9b-4990-bc0f-ecf265a273bf"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-build-container,tekton.dev/taskRunUID=775a0339-91a9-4277-b2e4-c85ce9aff54c"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-init,tekton.dev/taskRunUID=ada67cd3-229b-4167-9784-de3a07d716b1"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check,tekton.dev/taskRunUID=ba1ac0ee-dd4d-40b4-9fec-3391a4b98b8d"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-rpms-signature-scan,tekton.dev/taskRunUID=73c1ecba-6f1b-474c-83c3-e6c3c8449293"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies,tekton.dev/taskRunUID=d070ae6a-da7e-4bb3-806e-fed7f807c125"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-image-index,tekton.dev/taskRunUID=94f34e48-cd06-4834-b608-4b0f6fee1d96"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clamav-scan,tekton.dev/taskRunUID=e6fca190-d216-468e-83f5-f7bcefd9d95c"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T19:09:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-13T19:09:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:09:58.513867 1 request.go:752] "Waited before sending request" delay="1.995526668s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTMwODAsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T19:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T19:09:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:10:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T19:10:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T19:10:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:10:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T19:10:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:10:08.515054 1 request.go:752] "Waited before sending request" delay="1.863917115s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTMyNDcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:10:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T19:10:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:10:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:10:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:10:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:10:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:10:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:10:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T19:10:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:10:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,batch.kubernetes.io/job-name=segment-bridge-29644980,controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,job-name=segment-bridge-29644980"} {"level":"debug","ts":"2026-05-13T19:10:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"debug","ts":"2026-05-13T19:10:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T19:10:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T19:10:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T19:11:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-13T19:11:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-13T19:11:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T19:11:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:11:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T19:11:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T19:11:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T19:11:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T19:11:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T19:11:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T19:11:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T19:11:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T19:11:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T19:11:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:11:16.536628 1 request.go:752] "Waited before sending request" delay="1.787806299s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQzNTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:11:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T19:11:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:11:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:11:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:11:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:11:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T19:11:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:11:22Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:11:22Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T19:11:22Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T19:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T19:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:11:28.537288 1 request.go:752] "Waited before sending request" delay="1.865918616s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQ1NDIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-13T19:11:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T19:11:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T19:11:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T19:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T19:11:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:11:40.535604 1 request.go:752] "Waited before sending request" delay="1.994652641s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQ2NjMsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-13T19:11:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-rpms-signature-scan,tekton.dev/taskRunUID=73c1ecba-6f1b-474c-83c3-e6c3c8449293"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-tpa-scan,tekton.dev/taskRunUID=815bd1be-cd16-47b1-a7fe-70a5988a288c"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-build-image-index,tekton.dev/taskRunUID=3462b3cd-a3fd-4192-93a1-8033dbf44cea"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-clone-repository,tekton.dev/taskRunUID=71a7c225-1809-48df-8fc3-75c37ac1f8c9"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan,tekton.dev/taskRunUID=7305790e-7c71-4fa6-bfcd-1d80f411235e"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-rpms-signature-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-output-results\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clamav-scan,tekton.dev/taskRunUID=e6fca190-d216-468e-83f5-f7bcefd9d95c"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-init,tekton.dev/taskRunUID=ada67cd3-229b-4167-9784-de3a07d716b1"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-sast-shell-check,tekton.dev/taskRunUID=2a209e41-7f0a-4ffb-a0ec-53aaa2ee3fb4"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-shell-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-sast-unicode-check,tekton.dev/taskRunUID=02dc1c78-3c46-4547-8aff-4506a17b972b"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-unicode-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-image-index,tekton.dev/taskRunUID=94f34e48-cd06-4834-b608-4b0f6fee1d96"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check,tekton.dev/taskRunUID=ba1ac0ee-dd4d-40b4-9fec-3391a4b98b8d"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-shell-check,tekton.dev/taskRunUID=6c2e4e7e-f492-4c41-8a95-c814b4f6d780"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-unicode-check,tekton.dev/taskRunUID=5e2eca76-6c9b-4990-bc0f-ecf265a273bf"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-build-container,tekton.dev/taskRunUID=775a0339-91a9-4277-b2e4-c85ce9aff54c"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies,tekton.dev/taskRunUID=d070ae6a-da7e-4bb3-806e-fed7f807c125"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-clamav-scan,tekton.dev/taskRunUID=eb79cfbc-a95c-4da4-ae0f-e4c6d640b596"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-tpa-scan,tekton.dev/taskRunUID=e318dc34-2657-468d-9d78-6e925f19a67c"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=javb381d3c3b5a384b0dc2068314821dfe7-deprecated-base-image-check,tekton.dev/taskRunUID=d089e252-ecff-47d0-8453-a81c18d80bb7"} {"level":"info","ts":"2026-05-13T19:11:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T19:11:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T19:11:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:11:50.535608 1 request.go:752] "Waited before sending request" delay="1.880390121s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQ3OTgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:11:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T19:11:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T19:11:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T19:11:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T19:11:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:12:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:12:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:12:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T19:12:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:12:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:12:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:12:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:12:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T19:12:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:12:02.535614 1 request.go:752] "Waited before sending request" delay="1.883283054s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQ5NTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:12:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T19:12:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"debug","ts":"2026-05-13T19:12:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,batch.kubernetes.io/job-name=segment-bridge-29644980,controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,job-name=segment-bridge-29644980"} {"level":"info","ts":"2026-05-13T19:12:02Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-13T19:12:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-13T19:12:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-13T19:12:10Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-13T19:12:10Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:12:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-13T19:12:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:12:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:12:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-13T19:12:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"info","ts":"2026-05-13T19:13:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=849cb5d489"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-13T19:13:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-13T19:13:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q97094no6qjmb5iu1a4988fn9b6pqs7"} {"level":"info","ts":"2026-05-13T19:13:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=5e0898a0-b6d6-45d7-9189-8df4e1da4a43,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-13T19:13:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5d695cb796"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=584877b678"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5888f496c7"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-13T19:13:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-13T19:13:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59858ff4f6"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,batch.kubernetes.io/job-name=tuf-repository-init-tsctd,controller-uid=1c2ebf7b-0e7a-49a9-be16-16fd4bce6a89,job-name=tuf-repository-init-tsctd,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64d487b768"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=59b6f77dfb"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=56fb6f458c"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,batch.kubernetes.io/job-name=rekor-createtree-job-s8jp6,controller-uid=5511a145-16ac-4647-bb18-bf23d1857cf6,job-name=rekor-createtree-job-s8jp6"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=64fd496b4b"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,batch.kubernetes.io/job-name=ctlog-createtree-job-s85rj,controller-uid=40904639-9f74-411d-aa7b-5125e0d8cb13,job-name=ctlog-createtree-job-s85rj"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,batch.kubernetes.io/job-name=segment-backup-installation-kqjbf,controller-uid=27f51d70-d186-4f20-b24d-648df2788fb9,job-name=segment-backup-installation-kqjbf"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cd8d97d74"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=d6dd5f6f5"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f6ccf9577"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-13T19:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-13T19:13:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:13:14.500920 1 request.go:752] "Waited before sending request" delay="1.157852953s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTYwNjcsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:13:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:13:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:13:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:13:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:13:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-13T19:13:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-13T19:13:14Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-13T19:13:14Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-13T19:13:14Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-13T19:13:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:13:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:13:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:13:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:13:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-13T19:13:18Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-13T19:13:18Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-13T19:13:18Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T19:13:20Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:13:24.501683 1 request.go:752] "Waited before sending request" delay="1.995794552s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTYxNDYsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6778bbfb8f,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,batch.kubernetes.io/job-name=tsf-iam,controller-uid=e69f10d3-efc2-44ee-9ff3-db4870bb0431,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-13T19:13:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-13T19:13:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=56ffcfbcff"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-13T19:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-13T19:13:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-13T19:13:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:13:36.501615 1 request.go:752] "Waited before sending request" delay="1.997177583s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTYyODgsInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-clone-repository,tekton.dev/taskRunUID=71a7c225-1809-48df-8fc3-75c37ac1f8c9"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-init,tekton.dev/taskRunUID=ada67cd3-229b-4167-9784-de3a07d716b1"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-prefetch-dependencies,tekton.dev/taskRunUID=d070ae6a-da7e-4bb3-806e-fed7f807c125"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-rpms-signature-scan,tekton.dev/taskRunUID=73c1ecba-6f1b-474c-83c3-e6c3c8449293"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-shell-check,tekton.dev/taskRunUID=6c2e4e7e-f492-4c41-8a95-c814b4f6d780"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-sast-unicode-check,tekton.dev/taskRunUID=5e2eca76-6c9b-4990-bc0f-ecf265a273bf"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-build-container,tekton.dev/taskRunUID=775a0339-91a9-4277-b2e4-c85ce9aff54c"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-sast-shell-check,tekton.dev/taskRunUID=2a209e41-7f0a-4ffb-a0ec-53aaa2ee3fb4"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-tpa-scan,tekton.dev/taskRunUID=e318dc34-2657-468d-9d78-6e925f19a67c"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-container,tekton.dev/taskRunUID=30873a7d-0d20-46d9-8ddf-66a48b0f4ddc"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-build-image-index,tekton.dev/taskRunUID=94f34e48-cd06-4834-b608-4b0f6fee1d96"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clamav-scan,tekton.dev/taskRunUID=e6fca190-d216-468e-83f5-f7bcefd9d95c"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-init,tekton.dev/taskRunUID=04339027-50df-42f3-97cf-ef9fbbf026fa"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-prefetch-dependencies,tekton.dev/taskRunUID=9634437f-f0b7-4af8-8982-b1b725fe4648"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,appstudio.openshift.io/snapshot=test-app-177869918-20260513-190654-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75860083214,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=java-quarkus-177869918-on-push,pac.test.appstudio.openshift.io/repository=java-quarkus-177869918,pac.test.appstudio.openshift.io/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo-177869918,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=test-app-177869918-enterprise-contract-qjmp4,tekton.dev/pipelineRunUID=3a47628c-6d25-42d1-88de-5fae5cc0ac35,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=test-app1af2b32817220f69cc9b8532da19f50c-collect-keyless-params,tekton.dev/taskRunUID=620f1600-8e5a-4e7e-bc48-5fa35229d959,test.appstudio.openshift.io/pipelinerunfinishtime=1778699525,test.appstudio.openshift.io/scenario=test-app-177869918-enterprise-contract,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app1af2b32817220f69cc91e3a627b7b4dc274d962de749307c0d4-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app1af2b32817220f69cc91e3a627b7b4dc274d962de749307c0d4-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app1af2b32817220f69cc91e3a627b7b4dc274d962de749307c0d4-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app1af2b32817220f69cc91e3a627b7b4dc274d962de749307c0d4-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app1af2b32817220f69cc91e3a627b7b4dc274d962de749307c0d4-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app1af2b32817220f69cc91e3a627b7b4dc274d962de749307c0d4-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app1af2b32817220f69cc91e3a627b7b4dc274d962de749307c0d4-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app1af2b32817220f69cc91e3a627b7b4dc274d962de749307c0d4-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app1af2b32817220f69cc91e3a627b7b4dc274d962de749307c0d4-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-deprecated-base-image-check,tekton.dev/taskRunUID=ba1ac0ee-dd4d-40b4-9fec-3391a4b98b8d"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-tpa-scan,tekton.dev/taskRunUID=815bd1be-cd16-47b1-a7fe-70a5988a288c"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-build-image-index,tekton.dev/taskRunUID=3462b3cd-a3fd-4192-93a1-8033dbf44cea"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-rpms-signature-scan,tekton.dev/taskRunUID=7305790e-7c71-4fa6-bfcd-1d80f411235e"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-sast-unicode-check,tekton.dev/taskRunUID=02dc1c78-3c46-4547-8aff-4506a17b972b"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=javb381d3c3b5a384b0dc2068314821dfe7-deprecated-base-image-check,tekton.dev/taskRunUID=d089e252-ecff-47d0-8453-a81c18d80bb7"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,appstudio.openshift.io/snapshot=test-app-177869918-20260513-190654-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75860083214,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=java-quarkus-177869918-on-push,pac.test.appstudio.openshift.io/repository=java-quarkus-177869918,pac.test.appstudio.openshift.io/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo-177869918,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=test-app-177869918-enterprise-contract-qjmp4,tekton.dev/pipelineRunUID=3a47628c-6d25-42d1-88de-5fae5cc0ac35,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=test-app-177869918-enterprise-contract-qjmp4-verify,tekton.dev/taskRunUID=8d5bed63-779d-4a66-975d-bac492785b4e,test.appstudio.openshift.io/pipelinerunfinishtime=1778699525,test.appstudio.openshift.io/scenario=test-app-177869918-enterprise-contract,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177869918-enterprise-contract-qjmp4-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-5495c,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75857262637,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-5495c-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-5495c,pipelinesascode.tekton.dev/sha=5f83f12bf829c20ae47567e2e77ba04af3559d83,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRun=tsf-comp-5495c-on-push-ntxps,tekton.dev/pipelineRunUID=8daad8c7-16da-4c22-9edc-32ef20822c60,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-5495c-on-push-ntxps-clone-repository,tekton.dev/taskRunUID=fb9ed878-9ed9-4565-9d21-38bed3117738"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177869918,appstudio.openshift.io/component=java-quarkus-177869918,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75860083214,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177869918-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177869918,pipelinesascode.tekton.dev/sha=fb6cc64d7f8dfbda4f8e08e29c3f4350b8c6c31c,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177869918,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRun=java-quarkus-177869918-on-push-wjx6g,tekton.dev/pipelineRunUID=8deebd5a-b028-4124-81a3-4d1507891473,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=java-quarkus-177869918-on-push-wjx6g-clamav-scan,tekton.dev/taskRunUID=eb79cfbc-a95c-4da4-ae0f-e4c6d640b596"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177869918\" not found"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-13T19:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177869918-on-push-wjx6g-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"info","ts":"2026-05-13T19:13:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-13T19:13:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-13T19:13:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-13T19:13:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-13T19:13:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0513 19:13:46.501894 1 request.go:752] "Waited before sending request" delay="1.86391816s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTY0MzIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-13T19:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-13T19:13:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-13T19:13:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:13:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:13:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:13:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:13:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-13T19:13:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-13T19:13:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-13T19:13:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-13T19:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,batch.kubernetes.io/job-name=segment-bridge-29644980,controller-uid=d74c8ed0-dd5d-45b0-87f5-0fbae7cdf5d1,job-name=segment-bridge-29644980"} {"level":"debug","ts":"2026-05-13T19:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"debug","ts":"2026-05-13T19:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-13T19:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-13T19:13:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"}