Skip to content

[Bug] GeneratingPolicy with namespaceSelector fails to synchronize when objects are of kind Namespace

Kyverno Version

1.15.0

Kubernetes Version

1.32.x

Kubernetes Platform

Bare metal

Kyverno Rule Type

Other

Description

GeneratingPolicys with namespaceSelector that apply to namespace objects fail to synchronize producing the error message:

2025-11-07T14:14:15Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=

For example,

apiVersion: policies.kyverno.io/v1alpha1
kind: GeneratingPolicy
metadata:
  name: generating-policy-with-namespace-selector
spec:
  evaluation:
    generateExisting:
      enabled: true  
    synchronize:
      enabled: true
  matchConstraints:
    resourceRules:
    - apiGroups:   [""]
      apiVersions: ["v1"]
      operations:  ["CREATE"]
      resources:   ["namespaces"]
    namespaceSelector:
      matchLabels:
          app.kubernetes.io/managed-by: my-app
  variables:
    - name: targetNs
      expression: "object.metadata.name"
    - name: sourceSecret
      expression: resource.Get("v1", "secrets", "source-namespace", "secret-name")
  generate:
    - expression: generator.Apply(variables.targetNs, [variables.sourceSecret])

A possible work around is to switch to use objectSelector. However, the documentation indicates that namespaceSelector should work on namespaces. The documentation:

kubectl explain generatingpolicy.spec.matchConstraints.namespaceSelector

says:

If the object itself is a namespace, the matching is performed on object.metadata.labels.

Reading the source code the problem is caused by this line: https://github.com/kyverno/kyverno/blob/7411dabd32a87cce8d693bf90236de19f8860d4d/pkg/policy/gpol.go#L148 The current implementation of resource.GetNamespace() is getNestedString(u.Object, "metadata", "namespace"). namespace objects don't have a metadata.namespace so this fails to get the namespace name and returns an empty string.

The error message is logged and false is returned so that triggerMatches can never match namespace objects.

Steps to reproduce

  1. On a cluster with kyverno installed, apply the following manifest:
apiVersion: v1
kind: Namespace
metadata:
  name: example-namespace
  labels:
    app.kubernetes.io/managed-by: my-app
---
apiVersion: v1
kind: Namespace
metadata:
  name: source-namespace
---
apiVersion: v1
kind: Secret
metadata:
  name: secret-name
  namespace: source-namespace
data:
  access-key: aWQ=
  secret-key: c2VjcmV0
  1. Now apply the generating policy:
apiVersion: policies.kyverno.io/v1alpha1
kind: GeneratingPolicy
metadata:
  name: generating-policy-with-namespace-selector
spec:
  evaluation:
    generateExisting:
      enabled: true  
    synchronize:
      enabled: true
  matchConstraints:
    resourceRules:
    - apiGroups:   [""]
      apiVersions: ["v1"]
      operations:  ["CREATE"]
      resources:   ["namespaces"]
    namespaceSelector:
      matchLabels:
          app.kubernetes.io/managed-by: my-app
  variables:
    - name: targetNs
      expression: "object.metadata.name"
    - name: sourceSecret
      expression: resource.Get("v1", "secrets", "source-namespace", "secret-name")
  generate:
    - expression: generator.Apply(variables.targetNs, [variables.sourceSecret])
  1. Observe error messages in the background controller logs and that the secret has not been copied to example-namespace.

Expected behavior

The secret should be copied to the example-namespace. There should be no error messages produced by the background controller.

Screenshots

No response

Kyverno logs

2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/version/version.go:49 > version hash=f4ffc2d43d2d93b3daf3e5a9cb8a5d42738aba4b logger=setup/version v=2 version=v1.15.2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > add_dir_header=false logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > allowInsecureRegistry=false logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > alsologtostderr=false logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > cleanupServerPort=9443 logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > clientRateLimitBurst=200 logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > clientRateLimitQPS=100 logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > controllerRuntimeMetricsAddress= logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > crdWatcher=false logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > disableLogColor=false logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > disableMetrics=false logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > enableConfigMapCaching=true logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > enableDeferredLoading= logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > enablePolicyException=false logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > enableReporting=validate,mutate,mutateExisting,imageVerify,generate logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > enableTracing=false logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > exceptionNamespace= logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > genWorkers=10 logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > imagePullSecrets= logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > kubeconfig= logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > leaderElectionRetryPeriod=2s logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > log_backtrace_at=:0 logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > log_dir= logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > log_file= logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > log_file_max_size=1800 logger=setup/flag v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag loggingFormat=text v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag loggingtsFormat=default v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag logtostderr=true v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag maxBackgroundReports=10000 v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag maxQueuedEvents=1000 v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag metricsPort=8000 v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag one_output=false v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag otelConfig=prometheus v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag profile=false v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag profileAddress= v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag profilePort=6060 v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag registryCredentialHelpers= v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag resyncPeriod=15m0s v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag skip_headers=false v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag skip_log_headers=false v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag stderrthreshold=2 v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag tracingAddress= v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag tracingCreds= v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag tracingPort=4317 v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag transportCreds= v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag v=4
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/flag.go:301 > logger=setup/flag v=2 vmodule=
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2025-11-09T13:48:37Z -3 github.com/kyverno/kyverno/cmd/internal/maxprocs.go:16 > maxprocs: Leaving GOMAXPROCS=2: CPU quota undefined logger=setup/maxprocs v=4
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2025-11-09T13:48:37Z DBG k8s.io/client-go@v0.33.3/features/envvar.go:172 > Feature gate default state enabled=false feature=WatchListClient logger=klog v=1
2025-11-09T13:48:37Z DBG k8s.io/client-go@v0.33.3/features/envvar.go:172 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2025-11-09T13:48:37Z DBG k8s.io/client-go@v0.33.3/features/envvar.go:172 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2025-11-09T13:48:37Z DBG k8s.io/client-go@v0.33.3/features/envvar.go:172 > Feature gate default state enabled=false feature=InformerResourceVersion logger=klog v=1
2025-11-09T13:48:37Z DBG k8s.io/client-go@v0.33.3/features/envvar.go:172 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2025-11-09T13:48:37Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1.ConfigMap v=3
2025-11-09T13:48:37Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.ConfigMap v=3
2025-11-09T13:48:37Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.ConfigMap v=2
2025-11-09T13:48:37Z -3 github.com/kyverno/kyverno/pkg/config/metricsconfig.go:168 > metricsRefreshInterval not set logger=config name=kyverno-metrics namespace=kyverno v=4
2025-11-09T13:48:37Z -3 github.com/kyverno/kyverno/pkg/config/metricsconfig.go:190 > namespaces configured logger=config name=kyverno-metrics namespace=kyverno namespaces="{\"exclude\":[],\"include\":[]}" v=4
2025-11-09T13:48:37Z -3 github.com/kyverno/kyverno/pkg/config/metricsconfig.go:204 > bucketBoundaries configured bucketBoundaries="0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10, 15, 20, 25, 30" logger=config name=kyverno-metrics namespace=kyverno v=4
2025-11-09T13:48:37Z -3 github.com/kyverno/kyverno/pkg/config/metricsconfig.go:218 > metricsExposure configured logger=config metricsExposure="{\"kyverno_admission_requests_total\":{\"disabledLabelDimensions\":[\"resource_namespace\"]},\"kyverno_admission_review_duration_seconds\":{\"disabledLabelDimensions\":[\"resource_namespace\"]},\"kyverno_cleanup_controller_deletedobjects_total\":{\"disabledLabelDimensions\":[\"resource_namespace\",\"policy_namespace\"]},\"kyverno_policy_execution_duration_seconds\":{\"disabledLabelDimensions\":[\"resource_namespace\",\"resource_request_operation\"]},\"kyverno_policy_results_total\":{\"disabledLabelDimensions\":[\"resource_namespace\",\"policy_namespace\"]},\"kyverno_policy_rule_info_total\":{\"disabledLabelDimensions\":[\"resource_namespace\",\"policy_namespace\"]}}" name=kyverno-metrics namespace=kyverno v=4
2025-11-09T13:48:37Z -2 github.com/kyverno/kyverno/pkg/utils/controller/run.go:58 > starting ... logger=metrics-config-controller v=3
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/metrics.go:18 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= logger=setup/metrics otel=prometheus port=8000 v=2
2025-11-09T13:48:37Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1.ConfigMap v=3
2025-11-09T13:48:37Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.ConfigMap v=3
2025-11-09T13:48:37Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.ConfigMap v=2
2025-11-09T13:48:37Z -3 github.com/kyverno/kyverno/pkg/config/config.go:394 > filters configured filters=[{"Group":"*","Kind":"*","Name":"*","Namespace":"kyverno","Subresource":"*","Version":"*"},{"Group":"*","Kind":"Event","Name":"*","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"*","Name":"*","Namespace":"kube-system","Subresource":"*","Version":"*"},{"Group":"*","Kind":"*","Name":"*","Namespace":"kube-public","Subresource":"*","Version":"*"},{"Group":"*","Kind":"*","Name":"*","Namespace":"kube-node-lease","Subresource":"*","Version":"*"},{"Group":"*","Kind":"Node","Name":"*","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"Node","Name":"*","Namespace":"*","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"APIService","Name":"*","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"APIService","Name":"*","Namespace":"*","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"TokenReview","Name":"*","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"SubjectAccessReview","Name":"*","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"SelfSubjectAccessReview","Name":"*","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"Binding","Name":"*","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"Pod","Name":"*","Namespace":"*","Subresource":"binding","Version":"*"},{"Group":"*","Kind":"ReplicaSet","Name":"*","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ReplicaSet","Name":"*","Namespace":"*","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"EphemeralReport","Name":"*","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterEphemeralReport","Name":"*","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:admission-controller","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:admission-controller:core","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:admission-controller:additional","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:background-controller","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:background-controller:core","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:background-controller:additional","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:cleanup-controller","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:cleanup-controller:core","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:cleanup-controller:additional","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:reports-controller","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:reports-controller:core","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRole","Name":"kyverno:reports-controller:additional","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRoleBinding","Name":"kyverno:admission-controller","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRoleBinding","Name":"kyverno:background-controller","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRoleBinding","Name":"kyverno:cleanup-controller","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ClusterRoleBinding","Name":"kyverno:reports-controller","Namespace":"*","Subresource":"","Version":"*"},{"Group":"*","Kind":"ServiceAccount","Name":"kyverno-admission-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"ServiceAccount","Name":"kyverno-admission-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"ServiceAccount","Name":"kyverno-background-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"ServiceAccount","Name":"kyverno-background-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"ServiceAccount","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"ServiceAccount","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"ServiceAccount","Name":"kyverno-reports-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"ServiceAccount","Name":"kyverno-reports-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Role","Name":"kyverno:admission-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Role","Name":"kyverno:background-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Role","Name":"kyverno:cleanup-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Role","Name":"kyverno:reports-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"RoleBinding","Name":"kyverno:admission-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"RoleBinding","Name":"kyverno:background-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"RoleBinding","Name":"kyverno:cleanup-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"RoleBinding","Name":"kyverno:reports-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"ConfigMap","Name":"kyverno","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"ConfigMap","Name":"kyverno-metrics","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Deployment","Name":"kyverno-admission-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Deployment","Name":"kyverno-admission-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Deployment","Name":"kyverno-background-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Deployment","Name":"kyverno-background-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Deployment","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Deployment","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Deployment","Name":"kyverno-reports-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Deployment","Name":"kyverno-reports-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Pod","Name":"kyverno-admission-controller-*","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Pod","Name":"kyverno-admission-controller-*","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Pod","Name":"kyverno-background-controller-*","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Pod","Name":"kyverno-background-controller-*","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Pod","Name":"kyverno-cleanup-controller-*","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Pod","Name":"kyverno-cleanup-controller-*","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Pod","Name":"kyverno-reports-controller-*","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Pod","Name":"kyverno-reports-controller-*","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Job","Name":"kyverno-hook-pre-delete","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Job","Name":"kyverno-hook-pre-delete","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"NetworkPolicy","Name":"kyverno-admission-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"NetworkPolicy","Name":"kyverno-admission-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"NetworkPolicy","Name":"kyverno-background-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"NetworkPolicy","Name":"kyverno-background-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"NetworkPolicy","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"NetworkPolicy","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"NetworkPolicy","Name":"kyverno-reports-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"NetworkPolicy","Name":"kyverno-reports-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"PodDisruptionBudget","Name":"kyverno-admission-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"PodDisruptionBudget","Name":"kyverno-admission-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"PodDisruptionBudget","Name":"kyverno-background-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"PodDisruptionBudget","Name":"kyverno-background-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"PodDisruptionBudget","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"PodDisruptionBudget","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"PodDisruptionBudget","Name":"kyverno-reports-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"PodDisruptionBudget","Name":"kyverno-reports-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-svc","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-svc","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-svc-metrics","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-svc-metrics","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-background-controller-metrics","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-background-controller-metrics","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-cleanup-controller-metrics","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-cleanup-controller-metrics","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-reports-controller-metrics","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Service","Name":"kyverno-reports-controller-metrics","Namespace":"kyverno","Subresource":"?*","Version":"*"},{"Group":"*","Kind":"ServiceMonitor","Name":"kyverno-admission-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"ServiceMonitor","Name":"kyverno-background-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"ServiceMonitor","Name":"kyverno-cleanup-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"ServiceMonitor","Name":"kyverno-reports-controller","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Secret","Name":"kyverno-svc.kyverno.svc.*","Namespace":"kyverno","Subresource":"","Version":"*"},{"Group":"*","Kind":"Secret","Name":"kyverno-cleanup-controller.kyverno.svc.*","Namespace":"kyverno","Subresource":"","Version":"*"}] logger=config name=kyverno namespace=kyverno v=4
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:403 > defaultRegistry configured defaultRegistry=docker.io logger=config name=kyverno namespace=kyverno v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:419 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=kyverno namespace=kyverno v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:428 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=kyverno namespace=kyverno v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:433 > excludeUsernames not set logger=config name=kyverno namespace=kyverno v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:441 > excludeRoles not set logger=config name=kyverno namespace=kyverno v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:449 > excludeClusterRoles not set logger=config name=kyverno namespace=kyverno v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:465 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=kyverno namespace=kyverno v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:479 > webhooks configured logger=config name=kyverno namespace=kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kyverno\"]}],\"matchLabels\":null}}"
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:493 > webhookAnnotations configured logger=config name=kyverno namespace=kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:499 > webhookLabels not set logger=config name=kyverno namespace=kyverno v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:513 > matchConditions not set logger=config name=kyverno namespace=kyverno v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/pkg/config/config.go:534 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=kyverno namespace=kyverno v=2
2025-11-09T13:48:37Z TRC github.com/kyverno/kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2025-11-09T13:48:37Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1.Secret v=3
2025-11-09T13:48:37Z -2 github.com/kyverno/kyverno/pkg/utils/controller/run.go:58 > starting ... logger=config-controller v=3
2025-11-09T13:48:37Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.Secret v=3
2025-11-09T13:48:37Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=kyverno SchemaURL= Version= logger=setup/metrics v=4
2025-11-09T13:48:37Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.Secret v=2
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp SchemaURL= Version=0.62.0 logger=setup/metrics v=4
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp SchemaURL= Version=0.62.0 logger=setup/metrics v=4
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp SchemaURL= Version=0.62.0 logger=setup/metrics v=4
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp SchemaURL= Version=0.62.0 logger=setup/metrics v=4
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp SchemaURL= Version=0.62.0 logger=setup/metrics v=4
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp SchemaURL= Version=0.62.0 logger=setup/metrics v=4
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp SchemaURL= Version=0.62.0 logger=setup/metrics v=4
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting=validate,mutate,mutateExisting,imageVerify,generate generate=true imageVerify=true logger=setup/setup-reporting mutate=true mutateExisiting=true v=2 validate=true
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/background-controller/main.go:179 > setting the background scan interval logger=setup v=2 value=1h0m0s
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/engine.go:65 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=kyverno SchemaURL= Version= logger=setup/metrics v=4
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=kyverno SchemaURL= Version= logger=setup/metrics v=4
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/engine.go:94 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1.ConfigMap v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.ConfigMap v=3
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.ConfigMap v=2
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/engine.go:46 > setup engine... logger=setup/engine v=2
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=kyverno SchemaURL= Version= logger=setup/metrics v=4
2025-11-09T13:48:38Z -3 github.com/kyverno/kyverno/cmd/kyverno/watch/watcher.go:240 > Starting RetryWatcher. logger=klog v=4
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=kyverno SchemaURL= Version= logger=setup/metrics v=4
2025-11-09T13:48:38Z -3 github.com/kyverno/kyverno/cmd/kyverno/watch/watcher.go:240 > Starting RetryWatcher. logger=klog v=4
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v2alpha1.GlobalContextEntry v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v2alpha1.GlobalContextEntry v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1.ClusterPolicy v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.ClusterPolicy v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1.Policy v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.Policy v=3
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v2alpha1.GlobalContextEntry v=2
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.Policy v=2
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.ClusterPolicy v=2
2025-11-09T13:48:38Z INF k8s.io/client-go@v0.33.3/tools/leaderelection/leaderelection.go:257 > attempting to acquire leader lease kyverno/kyverno-background-controller... logger=klog v=0
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/pkg/event/controller.go:106 > start logger=EventGenerator v=2
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2025-11-09T13:48:38Z -2 github.com/kyverno/kyverno/pkg/utils/controller/run.go:58 > starting ... logger=global-context v=3
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=kyverno SchemaURL= Version= logger=setup/metrics v=4
2025-11-09T13:48:38Z INF k8s.io/client-go@v0.33.3/tools/leaderelection/leaderelection.go:271 > successfully acquired lease kyverno/kyverno-background-controller logger=klog v=0
2025-11-09T13:48:38Z -3 github.com/kyverno/kyverno/pkg/leaderelection/leaderelection.go:97 > still leading id=kyverno-background-controller-7f794f978-5zdpt logger=setup/leader-election v=4
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/pkg/leaderelection/leaderelection.go:83 > started leading id=kyverno-background-controller-7f794f978-5zdpt logger=setup/leader-election v=2
2025-11-09T13:48:38Z -3 go.opentelemetry.io/otel@v1.37.0/internal/global/internal_logging.go:45 > Meter created Attributes={} Name=go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp SchemaURL= Version=0.62.0 logger=setup/metrics v=4
2025-11-09T13:48:38Z INF sigs.k8s.io/controller-runtime@v0.21.0/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2025-11-09T13:48:38Z INF sigs.k8s.io/controller-runtime@v0.21.0/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2025-11-09T13:48:38Z INF sigs.k8s.io/controller-runtime@v0.21.0/pkg/internal/controller/controller.go:246 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1alpha1.MutatingPolicy" v=0
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=controller-runtime/cache reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=9h33m53.860837636s type=*v1alpha1.MutatingPolicy v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=controller-runtime/cache reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1alpha1.MutatingPolicy v=3
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=controller-runtime/cache reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1alpha1.MutatingPolicy v=2
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1.Policy v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.Policy v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v2.UpdateRequest v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v2.UpdateRequest v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1alpha1.GeneratingPolicy v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1alpha1.GeneratingPolicy v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1.Namespace v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.Namespace v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1.ClusterPolicy v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.ClusterPolicy v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:357 > Starting reflector logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 resyncPeriod=15m0s type=*v1alpha1.PolicyException v=3
2025-11-09T13:48:38Z -2 k8s.io/client-go@v0.33.3/tools/cache/reflector.go:403 > Listing and watching logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1alpha1.PolicyException v=3
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v2.UpdateRequest v=2
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.Policy v=2
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1alpha1.PolicyException v=2
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.Namespace v=2
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1alpha1.GeneratingPolicy v=2
2025-11-09T13:48:38Z TRC k8s.io/client-go@v0.33.3/tools/cache/reflector.go:430 > Caches populated logger=klog reflector=k8s.io/client-go@v0.33.3/tools/cache/reflector.go:285 type=*v1.ClusterPolicy v=2
2025-11-09T13:48:38Z INF sigs.k8s.io/controller-runtime@v0.21.0/pkg/internal/controller/controller.go:186 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2025-11-09T13:48:38Z INF sigs.k8s.io/controller-runtime@v0.21.0/pkg/internal/controller/controller.go:195 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=background-controller v=2 workers=10
2025-11-09T13:48:38Z -3 github.com/kyverno/kyverno/pkg/background/update_request_controller.go:142 > starting logger=background v=4
2025-11-09T13:48:38Z INF k8s.io/client-go@v0.33.3/tools/cache/shared_informer.go:350 > Waiting for caches to sync controller=background logger=klog v=0
2025-11-09T13:48:38Z INF k8s.io/client-go@v0.33.3/tools/cache/shared_informer.go:357 > Caches are synced controller=background logger=klog v=0
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=policy-controller v=2 workers=2
2025-11-09T13:48:38Z TRC github.com/kyverno/kyverno/pkg/policy/policy_controller.go:318 > starting logger=PolicyController v=2
2025-11-09T13:48:38Z INF k8s.io/client-go@v0.33.3/tools/cache/shared_informer.go:350 > Waiting for caches to sync controller=PolicyController logger=klog v=0
2025-11-09T13:48:38Z INF k8s.io/client-go@v0.33.3/tools/cache/shared_informer.go:357 > Caches are synced controller=PolicyController logger=klog v=0
2025-11-09T13:49:07Z TRC github.com/kyverno/kyverno/pkg/policy/policy_controller.go:207 > policy created kind=GeneratingPolicy logger=PolicyController name=generating-policy-with-namespace-selector namespace= uid=67d61c1c-da69-45e0-bc51-5ae03eddb49a v=2
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/policy/policy_controller.go:215 > queuing policy for background processing logger=PolicyController name=generating-policy-with-namespace-selector v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/policy/policy_controller.go:392 > started syncing policy key=gpol/generating-policy-with-namespace-selector logger=PolicyController/syncPolicy startTime="2025-11-09 13:49:07.663174868 +0000 UTC m=+29.917107033" v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/policy/policy_controller.go:428 > creating UR on generating policy events logger=PolicyController/syncPolicy name=generating-policy-with-namespace-selector v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/background/gpol/dynamic_watcher.go:180 > getting downstream resources for policy logger=WatchManager policyName=generating-policy-with-namespace-selector v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/background/gpol/dynamic_watcher.go:201 > no watchers found for policy logger=WatchManager policyName=generating-policy-with-namespace-selector v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/policy/gpol.go:25 > no downstream resources found for generating policy, creating UR to restore dynamic watcher cache logger=PolicyController v=4
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/policy/gpol.go:42 > creating new UR for GeneratingPolicy logger=PolicyController v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/background/update_request_controller.go:199 > started sync key=kyverno/ur-6979t logger=background startTime="2025-11-09 13:49:07.694189604 +0000 UTC m=+29.948121773" v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/background/update_request_controller.go:228 > synced update request key=kyverno/ur-6979t logger=background processingTime=2.231055ms ur status= v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/background/update_request_controller.go:199 > started sync key=kyverno/ur-6979t logger=background startTime="2025-11-09 13:49:07.699997801 +0000 UTC m=+29.953929965" v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/policy/policy_controller.go:436 > generating resources for existing triggers for generatingpolicy logger=PolicyController/syncPolicy name=generating-policy-with-namespace-selector v=4
2025-11-09T13:49:07Z TRC github.com/kyverno/kyverno/pkg/background/gpol/generate_controller.go:80 > start processing UR logger=background name=ur-6979t policy=generating-policy-with-namespace-selector resourceVersion=804 ur=ur-6979t v=2
2025-11-09T13:49:07Z -2 github.com/kyverno/kyverno/pkg/background/common/util.go:41 > updated update request status name=ur-6979t state=Completed status=Completed v=3
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/background/update_request_controller.go:228 > synced update request key=kyverno/ur-6979t logger=background processingTime=11.258296ms ur status=Completed v=4
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z ERR github.com/kyverno/kyverno/pkg/policy/gpol.go:151 > failed to get namespace error="name is required" logger=PolicyController name=
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/policy/gpol.go:67 > creating new UR for GeneratingPolicy logger=PolicyController v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/background/update_request_controller.go:199 > started sync key=kyverno/ur-sl58d logger=background startTime="2025-11-09 13:49:07.791410805 +0000 UTC m=+30.045342979" v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/background/update_request_controller.go:228 > synced update request key=kyverno/ur-sl58d logger=background processingTime=1.799997ms ur status= v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/policy/policy_controller.go:394 > finished syncing policy key=gpol/generating-policy-with-namespace-selector logger=PolicyController/syncPolicy processingTime=131.480579ms v=4
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/background/update_request_controller.go:199 > started sync key=kyverno/ur-sl58d logger=background startTime="2025-11-09 13:49:07.794662268 +0000 UTC m=+30.048594436" v=4
2025-11-09T13:49:07Z TRC github.com/kyverno/kyverno/pkg/background/gpol/generate_controller.go:80 > start processing UR logger=background name=ur-sl58d policy=generating-policy-with-namespace-selector resourceVersion=808 ur=ur-sl58d v=2
2025-11-09T13:49:07Z -2 github.com/kyverno/kyverno/pkg/background/common/util.go:41 > updated update request status name=ur-sl58d state=Completed status=Completed v=3
2025-11-09T13:49:07Z -3 github.com/kyverno/kyverno/pkg/background/update_request_controller.go:228 > synced update request key=kyverno/ur-sl58d logger=background processingTime=9.764281ms ur status=Completed v=4

Slack discussion

No response

Troubleshooting

  • I have read and followed the documentation AND the troubleshooting guide.
  • I have searched other issues in this repository and mine is not recorded.