Opa: Create a mutating admission controller tutorial

Created on 13 Sep 2018 · 17Comments · Source: open-policy-agent/opa

The current Kubernetes tutorial on openpolicyagent.org shows how to build a validating admission controller. Advanced users often follow up with questions about whether OPA can be used as a mutating admission controller. The answer is "yes" but we should include an example of the website as this is a common case.

Here's a simple example that may be out of date but communicates the essential bits (ripped from https://gist.github.com/tsandall/a9b2b57f7c6768f49b25271776b72dee):

MutatingAdmissionWebhook Example with OPA

This is a quick example of how to use OPA as a Mutating Admission Controller in
Kubernetes 1.9. You will need to run openpolicyagent/opa:0.6.1-dev.

Steps

Register OPA as a MutatingAdmissionWebhook
Load a policy to test mutation
Exercise the policy

1. Register OPA as a MutatingAdmissionWebhook

The steps in Kubernetes Admission
Control
show how to deploy OPA as a Validating Admission Controller. To deploy OPA as a
Mutating Admission Controller, follow steps 1-3. In step 3, instead of creating
a ValidatingWebhookConfiguration, create a MutatingWebhookConfiguration:

kind: MutatingWebhookConfiguration
apiVersion: admissionregistration.k8s.io/v1beta1
metadata:
  name: opa-mutating-webhook
webhooks:
  - name: mutating-webhook.openpolicyagent.org
    rules:
      - operations: ["*"]
        apiGroups: ["*"]
        apiVersions: ["*"]
        resources: ["*"]
    clientConfig:
      service:
        namespace: opa
        name: opa
      caBundle: <CA-BUNDLE>

2. Load a policy to test mutation

Define a policy to exercise mutation.

example.rego:

package system

# Entry point to the policy. This is queried by the Kubernetes apiserver.
main = {
    "apiVersion": "admission.k8s.io/v1beta1",
    "kind": "AdmissionReview",
    "response": response,
}

# If no other responses are defined, allow the request.
default response = {
    "allowed": true
}

# Mutate the request if any there are any patches.
response = {
    "allowed": true,
    "patchType": "JSONPatch",
    "patch": base64url.encode(json.marshal(patches)),
} {
    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened array
    count(patches) > 0
}

# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.
# If you need to define ordering across patches, generate them inside the same rule.
patch[[
    {
        "op": "add",
        "path": "/metadata/annotations/foo",
        "value": "bar",
    }
]] {

    # Only apply mutations to objects in create/update operations (not
    # delete/connect operations.)
    is_create_or_update

    # If the resource has the "test-mutation" annotation key, the patch will be
    # generated and applied to the resource.
    input.request.object.metadata.annotations["test-mutation"]
}

is_create_or_update { is_create }
is_create_or_update { is_update }
is_create { input.request.operation == "CREATE" }
is_update { input.request.operation == "UPDATE" }

This policy will mutate resources that define an annotation with the key "test-mutation". The resouces will be updated to include the annotation "foo": "bar".

Load the policy as a ConfigMap:

kubectl create configmap example --from-file example.rego

3. Exercise the policy

First create a Deployment:

kubectl run nginx --image nginx

Check that the Deployment was not mutated:

kubectl get deployment nginx -o json | jq '.metadata'

Annotate the Deployment to indicate that it should be mutated:

kubectl annotate deployment nginx test-mutation=true

Check that the Deployment was mutated:

kubectl get deployment nginx -o json | jq '.metadata'

docs

Source

tsandall

👍4

Most helpful comment

I'd like to ask that this be re-opened, since Gatekeeper today does not support mutating webhooks, and an example would be nice until then :+1:

dbirks on 21 Aug 2019

👍12

All 17 comments

I have a slightly expanded version which handles both validating and mutating - https://github.com/teq0/opa-k8s-admission/blob/master/rego/core.rego

Mine is obviously still a work in progress, but it seems like this is going to be a very popular use case for OPA, would be good to have a complete reference implementation. I get the feeling there are quite a few people reinventing the wheel right now.

teq0 on 4 Jan 2019

👍2

Here's another little tool for creating simple mutating webhooks from yaml based rules https://github.com/HotelsDotCom/kube-graffiti. It can add/delete annotations and labels, block submission, or allow modification via a JSON Patch.

davidmccormick on 7 Jan 2019

👍4

@teq0 thanks for sharing. I'm thinking we ought to just create a mutating admission webhook tutorial with a simple example like the one above. I'll take a closer look at your policies and see if there's something we can reuse.

tsandall on 7 Jan 2019

I'm about to do a PR to the library for this, after discussions with @timothyhinrichs.

teq0 on 13 Jan 2019

Hi,
I try the example, but the annotations foo don't appear on the nginx pod.

{
  "annotations": {
    "deployment.kubernetes.io/revision": "1",
    "test-mutation": "true"
  },
  "creationTimestamp": "2019-03-12T21:45:25Z",
  "generation": 2,
  "labels": {
    "run": "nginx"
  },
  "name": "nginx",
  "namespace": "opa",
  "resourceVersion": "5825618",
  "selfLink": "/apis/extensions/v1beta1/namespaces/opa/deployments/nginx",
  "uid": "24c21137-4510-11e9-bf55-0050568f58c0"
}

How can I debug this error?

rogeduardo on 12 Mar 2019

@rogeduardo we have some debugging tips in this issue: https://github.com/open-policy-agent/opa/issues/1039.

tsandall on 12 Mar 2019

@rogeduardo we have some debugging tips in this issue: #1039.

@tsandall, I try yours tips but I dont see nothing wrong. Do you have more sugestions?

Result from the debug
$ kubectl get configmap -o yaml example
apiVersion: v1
data:
example-mutation.rego: |
package system

main = {
    "apiVersion": "admission.k8s.io/v1beta1",
    "kind": "AdmissionReview",
    "response": {
        "allowed": true,

        # kube-apiserver only supports JSON Patch today.
        "patchType": "JSONPatch",

        # kube-apiserver expects changes to be represented as JSON Patch
        # operations against the resource. The JSON Patch must be JSON
        # serialized and base64 encoded.
        "patch": base64url.encode(json.marshal([
            {"op": "add", "path": "/metadata/annotations/foo", "value": "bar"},
        ])),
    }
} {
    # Only apply mutations to objects in create/update operations (not
    # delete/connect operations.)
    is_create_or_update

    # If the resource has the "test-mutation" annotation key, the patch will be
    # generated and applied to the resource.
    input.request.object.metadata.annotations["test-mutation"]
}

is_create_or_update { is_create }
is_create_or_update { is_update }
is_create { input.request.operation == "CREATE" }
is_update { input.request.operation == "UPDATE" }

kind: ConfigMap
metadata:
annotations:
openpolicyagent.org/policy-status: '{"status":"ok"}'
creationTimestamp: "2019-03-12T21:45:04Z"
name: example
namespace: opa
resourceVersion: "5825549"
selfLink: /api/v1/namespaces/opa/configmaps/example
uid: 1882f67e-4510-11e9-bf55-0050568f58c0

$ kubectl logs -l app=opa -c opa
time="2019-03-13T14:43:46Z" level=info msg="Received request." client_addr="192.168.223.64:36788" req_id=189440 req_method=POST req_params="map[timeout:[30s]]" req_path=/
time="2019-03-13T14:43:46Z" level=info msg="Sent response." client_addr="192.168.223.64:36788" req_id=189440 req_method=POST req_path=/ resp_bytes=94 resp_duration=6.404506 resp_status=200
time="2019-03-13T14:43:48Z" level=info msg="Received request." client_addr="192.168.223.64:36788" req_id=189441 req_method=POST req_params="map[timeout:[30s]]" req_path=/
time="2019-03-13T14:43:48Z" level=info msg="Sent response." client_addr="192.168.223.64:36788" req_id=189441 req_method=POST req_path=/ resp_bytes=94 resp_duration=3.235484 resp_status=200
time="2019-03-13T14:43:48Z" level=info msg="Received request." client_addr="192.168.223.64:36788" req_id=189442 req_method=POST req_params="map[timeout:[30s]]" req_path=/
time="2019-03-13T14:43:48Z" level=info msg="Sent response." client_addr="192.168.223.64:36788" req_id=189442 req_method=POST req_path=/ resp_bytes=94 resp_duration=3.06431 resp_status=200
time="2019-03-13T14:43:50Z" level=info msg="Received request." client_addr="192.168.223.64:36788" req_id=189443 req_method=POST req_params="map[timeout:[30s]]" req_path=/
time="2019-03-13T14:43:50Z" level=info msg="Sent response." client_addr="192.168.223.64:36788" req_id=189443 req_method=POST req_path=/ resp_bytes=94 resp_duration=3.401663 resp_status=200
time="2019-03-13T14:43:50Z" level=info msg="Received request." client_addr="192.168.223.64:36788" req_id=189444 req_method=POST req_params="map[timeout:[30s]]" req_path=/
time="2019-03-13T14:43:50Z" level=info msg="Sent response." client_addr="192.168.223.64:36788" req_id=189444 req_method=POST req_path=/ resp_bytes=94 resp_duration=3.524408 resp_status=200

And I try to change base64url for base64.

rogeduardo on 13 Mar 2019

@rogeduardo hrmmm. Could you turn on debug logging on OPA and paste the POST response body here? As a side note, I went back and updated the original example to include a default response which is needed if the admission controller is configured to fail closed,

tsandall on 13 Mar 2019

@tsandall, thank you very much for your help. I dont know how to turn on debug logging on OPA.

rogeduardo on 14 Mar 2019

@rogeduardo To turn on OPA's debug logging start OPA with --log-level=debug.

ashutosh-narkar on 14 Mar 2019

@tsandall and @ashutosh-narkar, I found my mistake. I'm using the last version of opa, not the 0.6.1-dev, as tutorial say. Now, I'm getting other error. Opa container log print this message:

{"log":"2019/03/15 20:35:27 http: TLS handshake error from 127.0.0.1:47738: tls: first record does not look like a TLS handshake\n","stream":"stderr","time":"2019-03-15T20:35:27.167975825Z"}
{"log":"2019/03/15 20:35:27 http: TLS handshake error from 127.0.0.1:47736: tls: first record does not look like a TLS handshake\n","stream":"stderr","time":"2019-03-15T20:35:27.168032659Z"}
{"log":"2019/03/15 20:35:55 http: TLS handshake error from 127.0.0.1:47760: tls: first record does not look like a TLS handshake\n","stream":"stderr","time":"2019-03-15T20:35:55.541582493Z"}
{"log":"2019/03/15 20:35:55 http: TLS handshake error from 127.0.0.1:47762: tls: first record does not look like a TLS handshake\n","stream":"stderr","time":"2019-03-15T20:35:55.569983782Z"}
{"log":"2019/03/15 20:35:57 http: TLS handshake error from 127.0.0.1:47770: tls: first record does not look like a TLS handshake\n","stream":"stderr","time":"2019-03-15T20:35:57.182416483Z"}
{"log":"2019/03/15 20:35:57 http: TLS handshake error from 127.0.0.1:47768: tls: first record does not look like a TLS handshake\n","stream":"stderr","time":"2019-03-15T20:35:57.182567304Z"}

Any idea what could be? I'm using this yaml to create opa:

# Grant OPA/kube-mgmt read-only access to resources. This let's kube-mgmt
# replicate resources into OPA so they can be used in policies.
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: opa-viewer
roleRef:
  kind: ClusterRole
  name: view
  apiGroup: rbac.authorization.k8s.io
subjects:
- kind: Group
  name: system:serviceaccounts:opa
  apiGroup: rbac.authorization.k8s.io
---
# Define role for OPA/kube-mgmt to update configmaps with policy status.
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  namespace: opa
  name: configmap-modifier
rules:
- apiGroups: [""]
  resources: ["configmaps"]
  verbs: ["update", "patch"]
---
# Grant OPA/kube-mgmt role defined above.
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  namespace: opa
  name: opa-configmap-modifier
roleRef:
  kind: Role
  name: configmap-modifier
  apiGroup: rbac.authorization.k8s.io
subjects:
- kind: Group
  name: system:serviceaccounts:opa
  apiGroup: rbac.authorization.k8s.io
---
kind: Service
apiVersion: v1
metadata:
  name: opa
  namespace: opa
spec:
  selector:
    app: opa
  ports:
  - name: https
    protocol: TCP
    port: 443
    targetPort: 443
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  labels:
    app: opa
  namespace: opa
  name: opa
spec:
  replicas: 1
  selector:
    matchLabels:
      app: opa
  template:
    metadata:
      labels:
        app: opa
      name: opa
    spec:
      containers:
        # WARNING: OPA is NOT running with an authorization policy configured. This
        # means that clients can read and write policies in OPA. If you are
        # deploying OPA in an insecure environment, be sure to configure
        # authentication and authorization on the daemon. See the Security page for
        # details: https://www.openpolicyagent.org/docs/security.html.
        - name: opa
          image: openpolicyagent/opa:0.6.1-dev
          args:
            - "run"
            - "--server"
            - "--tls-cert-file=/certs/tls.crt"
            - "--tls-private-key-file=/certs/tls.key"
            - "--addr=0.0.0.0:443"
            - "--addr=127.0.0.1:8181"
            - "--log-level=debug"
          volumeMounts:
            - readOnly: true
              mountPath: /certs
              name: opa-server
        - name: kube-mgmt
          image: openpolicyagent/kube-mgmt:0.6
          args:
            - "--replicate-cluster=v1/namespaces"
            - "--replicate=extensions/v1beta1/ingresses"
      volumes:
        - name: opa-server
          secret:
            secretName: opa-server
---
kind: ConfigMap
apiVersion: v1
metadata:
  name: opa-default-system-main
  namespace: opa
data:
  main: |
    package system

    import data.kubernetes.admission

    main = {
      "apiVersion": "admission.k8s.io/v1beta1",
      "kind": "AdmissionReview",
      "response": response,
    }

    default response = {"allowed": true}

    response = {
        "allowed": false,
        "status": {
            "reason": reason,
        },
    } {
        reason = concat(", ", admission.deny)
        reason != ""
    }

rogeduardo on 15 Mar 2019

@rogeduardo I recommend you run the most recent stable version of OPA (v0.10.5). The version you're referencing is over a year old. Please use a recent version.

The logs you've shared indicate misconfiguration or some kind of bug. I recommend running OPA v0.10.5 and kube-mgmt v0.8.

If you share the logs with those versions we can provide more support. :+1:

tsandall on 15 Mar 2019

This log is since I created the opa service:

{"log":"time="2019-03-15T21:01:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49430" req_id=8 req_method=PUT req_path=/v1/data/kubernetes/namespaces/staging resp_body= resp_bytes=0 resp_duration=0.226463 resp_status=204n","stream":"stderr","time":"2019-03-15T21:01:39.158601921Z"}
{"log":"time="2019-03-15T21:01:39Z" level=info msg="Received request." client_addr="127.0.0.1:49430" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-03-12T15:07:06Z","name":"ia","resourceVersion":"5793915","selfLink":"/api/v1/namespaces/ia","uid":"7fe7e626-44d8-11e9-bf55-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=9 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/ian","stream":"stderr","time":"2019-03-15T21:01:39.160790801Z"}
{"log":"time="2019-03-15T21:01:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49430" req_id=9 req_method=PUT req_path=/v1/data/kubernetes/namespaces/ia resp_body= resp_bytes=0 resp_duration=0.198051 resp_status=204n","stream":"stderr","time":"2019-03-15T21:01:39.16081727Z"}
{"log":"time="2019-03-15T21:01:39Z" level=info msg="Received request." client_addr="127.0.0.1:49430" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-01-15T19:57:22Z","name":"default","resourceVersion":"11","selfLink":"/api/v1/namespaces/default","uid":"c5a3fb79-18ff-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=10 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/defaultn","stream":"stderr","time":"2019-03-15T21:01:39.160828812Z"}
{"log":"time="2019-03-15T21:01:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49430" req_id=10 req_method=PUT req_path=/v1/data/kubernetes/namespaces/default resp_body= resp_bytes=0 resp_duration=0.242478 resp_status=204n","stream":"stderr","time":"2019-03-15T21:01:39.160843343Z"}
{"log":"time="2019-03-15T21:01:39Z" level=info msg="Received request." client_addr="127.0.0.1:49430" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-01-15T19:57:22Z","name":"kube-public","resourceVersion":"39","selfLink":"/api/v1/namespaces/kube-public","uid":"c5ac25c3-18ff-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=11 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/kube-publicn","stream":"stderr","time":"2019-03-15T21:01:39.160853246Z"}
{"log":"time="2019-03-15T21:01:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49430" req_id=11 req_method=PUT req_path=/v1/data/kubernetes/namespaces/kube-public resp_body= resp_bytes=0 resp_duration=0.237175 resp_status=204n","stream":"stderr","time":"2019-03-15T21:01:39.160868732Z"}
{"log":"time="2019-03-15T21:01:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49428" req_id=2 req_method=PUT req_path=/v1/policies/opa/opa-default-system-main/main resp_body="{}" resp_bytes=2 resp_duration=21.439322 resp_status=200n","stream":"stderr","time":"2019-03-15T21:01:39.175847884Z"}
{"log":"time="2019-03-15T21:01:39Z" level=info msg="Received request." client_addr="127.0.0.1:49430" req_body="package systemnnimport data.kubernetes.admissionnnmain = {n  "apiVersion": "admission.k8s.io/v1beta1",n  "kind": "AdmissionReview",n  "response": response,n}nndefault response = {"allowed": true}nnresponse = {n    "allowed": false,n    "status": {n        "reason": reason,n    },n} {n    reason = concat(", ", admission.deny)n    reason != ""n}n" req_id=12 req_method=PUT req_params="map[]" req_path=/v1/policies/opa/opa-default-system-main/mainn","stream":"stderr","time":"2019-03-15T21:01:39.18127675Z"}
{"log":"time="2019-03-15T21:01:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49430" req_id=12 req_method=PUT req_path=/v1/policies/opa/opa-default-system-main/main resp_body="{}" resp_bytes=2 resp_duration=30.072478 resp_status=200n","stream":"stderr","time":"2019-03-15T21:01:39.21081538Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49432" req_body="package systemnnimport data.kubernetes.admissionnnmain = {n  "apiVersion": "admission.k8s.io/v1beta1",n  "kind": "AdmissionReview",n  "response": response,n}nndefault response = {"allowed": true}nnresponse = {n    "allowed": false,n    "status": {n        "reason": reason,n    },n} {n    reason = concat(", ", admission.deny)n    reason != ""n}n" req_id=13 req_method=PUT req_params="map[]" req_path=/v1/policies/opa/opa-default-system-main/mainn","stream":"stderr","time":"2019-03-15T21:02:39.123170601Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49502" req_body="{"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"creationTimestamp":"2019-01-17T17:19:21Z","generation":1,"name":"ingress-ok","namespace":"production","resourceVersion":"212222","selfLink":"/apis/extensions/v1beta1/namespaces/production/ingresses/ingress-ok","uid":"077de880-1a7c-11e9-833b-0050568f58c0"},"spec":{"rules":[{"host":"signin.acmecorp.com","http":{"paths":[{"backend":{"serviceName":"nginx","servicePort":80}}]}}]},"status":{"loadBalancer":{}}}n" req_id=14 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/ingresses/production/ingress-okn","stream":"stderr","time":"2019-03-15T21:02:39.139083481Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-01-15T19:57:22Z","name":"kube-system","resourceVersion":"37","selfLink":"/api/v1/namespaces/kube-system","uid":"c5ab70af-18ff-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=15 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/kube-systemn","stream":"stderr","time":"2019-03-15T21:02:39.139115987Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49432" req_id=13 req_method=PUT req_path=/v1/policies/opa/opa-default-system-main/main resp_body="{}" resp_bytes=2 resp_duration=27.504259 resp_status=200n","stream":"stderr","time":"2019-03-15T21:02:39.150486154Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49502" req_id=14 req_method=PUT req_path=/v1/data/kubernetes/ingresses/production/ingress-ok resp_body= resp_bytes=0 resp_duration=11.604178 resp_status=204n","stream":"stderr","time":"2019-03-15T21:02:39.150526972Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=15 req_method=PUT req_path=/v1/data/kubernetes/namespaces/kube-system resp_body= resp_bytes=0 resp_duration=11.444566 resp_status=204n","stream":"stderr","time":"2019-03-15T21:02:39.150539811Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-01-15T20:14:44Z","name":"opa","resourceVersion":"1840","selfLink":"/api/v1/namespaces/opa","uid":"332126d8-1902-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=16 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/opan","stream":"stderr","time":"2019-03-15T21:02:39.150985685Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=16 req_method=PUT req_path=/v1/data/kubernetes/namespaces/opa resp_body= resp_bytes=0 resp_duration=0.180557 resp_status=204n","stream":"stderr","time":"2019-03-15T21:02:39.151109684Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49502" req_body="{"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"creationTimestamp":"2019-01-17T17:19:37Z","generation":1,"name":"ingress-bad","namespace":"production","resourceVersion":"212242","selfLink":"/apis/extensions/v1beta1/namespaces/production/ingresses/ingress-bad","uid":"1148bce5-1a7c-11e9-833b-0050568f58c0"},"spec":{"rules":[{"host":"acmecorp.com","http":{"paths":[{"backend":{"serviceName":"nginx","servicePort":80}}]}}]},"status":{"loadBalancer":{}}}n" req_id=17 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/ingresses/production/ingress-badn","stream":"stderr","time":"2019-03-15T21:02:39.151286996Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49502" req_id=17 req_method=PUT req_path=/v1/data/kubernetes/ingresses/production/ingress-bad resp_body= resp_bytes=0 resp_duration=0.208632 resp_status=204n","stream":"stderr","time":"2019-03-15T21:02:39.151509128Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"ingress-whitelist":"*.acmecorp.com"},"creationTimestamp":"2019-01-17T17:12:30Z","name":"production","resourceVersion":"211686","selfLink":"/api/v1/namespaces/production","uid":"126b62bd-1a7b-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=18 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/productionn","stream":"stderr","time":"2019-03-15T21:02:39.151940015Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=18 req_method=PUT req_path=/v1/data/kubernetes/namespaces/production resp_body= resp_bytes=0 resp_duration=0.202648 resp_status=204n","stream":"stderr","time":"2019-03-15T21:02:39.152117314Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"ingress-whitelist":"*.qa.acmecorp.com,*.internal.acmecorp.com"},"creationTimestamp":"2019-01-17T17:10:48Z","name":"qa","resourceVersion":"211548","selfLink":"/api/v1/namespaces/qa","uid":"d58c77f6-1a7a-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=19 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/qan","stream":"stderr","time":"2019-03-15T21:02:39.152846634Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=19 req_method=PUT req_path=/v1/data/kubernetes/namespaces/qa resp_body= resp_bytes=0 resp_duration=0.220458 resp_status=204n","stream":"stderr","time":"2019-03-15T21:02:39.152890387Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"ingress-whitelist":"*.acmecorp.com"},"creationTimestamp":"2019-02-01T18:01:34Z","name":"staging","resourceVersion":"1895069","selfLink":"/api/v1/namespaces/staging","uid":"6939f41b-264b-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=20 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/stagingn","stream":"stderr","time":"2019-03-15T21:02:39.153246089Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=20 req_method=PUT req_path=/v1/data/kubernetes/namespaces/staging resp_body= resp_bytes=0 resp_duration=0.208816 resp_status=204n","stream":"stderr","time":"2019-03-15T21:02:39.153407111Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-03-12T15:07:06Z","name":"ia","resourceVersion":"5793915","selfLink":"/api/v1/namespaces/ia","uid":"7fe7e626-44d8-11e9-bf55-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=21 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/ian","stream":"stderr","time":"2019-03-15T21:02:39.154073897Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=21 req_method=PUT req_path=/v1/data/kubernetes/namespaces/ia resp_body= resp_bytes=0 resp_duration=0.202069 resp_status=204n","stream":"stderr","time":"2019-03-15T21:02:39.154116273Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-01-15T19:57:22Z","name":"default","resourceVersion":"11","selfLink":"/api/v1/namespaces/default","uid":"c5a3fb79-18ff-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=22 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/defaultn","stream":"stderr","time":"2019-03-15T21:02:39.154434556Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=22 req_method=PUT req_path=/v1/data/kubernetes/namespaces/default resp_body= resp_bytes=0 resp_duration=0.235929 resp_status=204n","stream":"stderr","time":"2019-03-15T21:02:39.154594362Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-01-15T19:57:22Z","name":"kube-public","resourceVersion":"39","selfLink":"/api/v1/namespaces/kube-public","uid":"c5ac25c3-18ff-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=23 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/kube-publicn","stream":"stderr","time":"2019-03-15T21:02:39.155271404Z"}
{"log":"time="2019-03-15T21:02:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=23 req_method=PUT req_path=/v1/data/kubernetes/namespaces/kube-public resp_body= resp_bytes=0 resp_duration=0.18551 resp_status=204n","stream":"stderr","time":"2019-03-15T21:02:39.155298113Z"}
{"log":"time="2019-03-15T21:03:09Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a18e09ec-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157715","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:14Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157715","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:12Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=24 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:09.091245899Z"}
{"log":"time="2019-03-15T21:03:09Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a1900de8-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157716","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:14Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157716","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:12Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=25 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:09.095832998Z"}
{"log":"time="2019-03-15T21:03:09Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=24 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.649299 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:09.095920241Z"}
{"log":"time="2019-03-15T21:03:09Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=25 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.549044 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:09.097080841Z"}
{"log":"time="2019-03-15T21:03:11Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a2c2c704-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157721","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:16Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157721","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:14Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=26 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:11.104434931Z"}
{"log":"time="2019-03-15T21:03:11Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a2c30202-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157722","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:16Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157722","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:14Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=27 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:11.107843367Z"}
{"log":"time="2019-03-15T21:03:11Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=26 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.058089 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:11.107927553Z"}
{"log":"time="2019-03-15T21:03:11Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=27 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.351448 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:11.108578668Z"}
{"log":"time="2019-03-15T21:03:13Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a3f5b329-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157723","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:18Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157723","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:16Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=28 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:13.116160271Z"}
{"log":"time="2019-03-15T21:03:13Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a3f6347b-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157724","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:18Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157724","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:16Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=29 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:13.119077319Z"}
{"log":"time="2019-03-15T21:03:13Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=29 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.788326 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:13.121765379Z"}
{"log":"time="2019-03-15T21:03:13Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=28 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=6.876914 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:13.122378902Z"}
{"log":"time="2019-03-15T21:03:15Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a5296d77-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157725","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:20Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157725","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:18Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=30 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:15.132513921Z"}
{"log":"time="2019-03-15T21:03:15Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a529a9a2-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157726","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:20Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157726","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:18Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=31 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:15.135776951Z"}
{"log":"time="2019-03-15T21:03:15Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=30 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.065154 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:15.135849865Z"}
{"log":"time="2019-03-15T21:03:15Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=31 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.001347 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:15.136202976Z"}
{"log":"time="2019-03-15T21:03:17Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a65c7c17-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157727","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:22Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157727","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:20Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=32 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:17.144865842Z"}
{"log":"time="2019-03-15T21:03:17Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a65ca9af-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157728","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:22Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157728","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:20Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=33 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:17.148326127Z"}
{"log":"time="2019-03-15T21:03:17Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=32 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.186232 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:17.148393176Z"}
{"log":"time="2019-03-15T21:03:17Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=33 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.716269 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:17.148410708Z"}
{"log":"time="2019-03-15T21:03:19Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a78f7c90-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157729","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:24Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157729","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:22Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=34 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:19.156883229Z"}
{"log":"time="2019-03-15T21:03:19Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a78fd66a-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157730","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:24Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157730","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:22Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=35 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:19.162361922Z"}
{"log":"time="2019-03-15T21:03:19Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=34 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.395885 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:19.162423353Z"}
{"log":"time="2019-03-15T21:03:19Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=35 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.679458 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:19.163463934Z"}
{"log":"time="2019-03-15T21:03:21Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a8c2e8c1-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157734","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:26Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157734","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:24Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=36 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:21.171558963Z"}
{"log":"time="2019-03-15T21:03:21Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a8c31249-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157735","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:26Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157735","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:24Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=37 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:21.175021558Z"}
{"log":"time="2019-03-15T21:03:21Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=36 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.61688 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:21.175067079Z"}
{"log":"time="2019-03-15T21:03:21Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=37 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.829274 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:21.175092734Z"}
{"log":"time="2019-03-15T21:03:23Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a9f63462-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157736","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:28Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157736","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:26Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=38 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:23.185468182Z"}
{"log":"time="2019-03-15T21:03:23Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"a9f63866-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157737","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:28Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157737","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:26Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=39 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:23.187794906Z"}
{"log":"time="2019-03-15T21:03:23Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=38 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.86363 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:23.189127661Z"}
{"log":"time="2019-03-15T21:03:23Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=39 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.952891 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:23.189172724Z"}
{"log":"time="2019-03-15T21:03:25Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"ab295987-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157738","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:30Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157738","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:28Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=41 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:25.201426919Z"}
{"log":"time="2019-03-15T21:03:25Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"ab29504e-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157739","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:30Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157739","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:28Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=40 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:25.201543693Z"}
{"log":"time="2019-03-15T21:03:25Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=40 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.313023 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:25.20159844Z"}
{"log":"time="2019-03-15T21:03:25Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=41 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.301731 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:25.201623445Z"}
{"log":"time="2019-03-15T21:03:27Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"ac5c6385-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157741","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:32Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157741","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:30Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=42 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:27.211035788Z"}
{"log":"time="2019-03-15T21:03:27Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"ac5c9008-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157742","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:32Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157742","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:30Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=43 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:27.216038869Z"}
{"log":"time="2019-03-15T21:03:27Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=42 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.733784 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:27.216101603Z"}
{"log":"time="2019-03-15T21:03:27Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=43 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.944381 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:27.216418133Z"}
{"log":"time="2019-03-15T21:03:28Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"ace628ba-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"ConfigMap"},"resource":{"group":"","version":"v1","resource":"configmaps"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"kubernetes-admin","groups":["system:masters","system:authenticated"]},"object":{"metadata":{"name":"example","creationTimestamp":null},"data":{"example-mutation.rego":"package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n"}},"oldObject":null,"dryRun":false}}n" req_id=44 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:28.11370007Z"}
{"log":"time="2019-03-15T21:03:28Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=44 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.078464 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:28.117513501Z"}
{"log":"time="2019-03-15T21:03:28Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n" req_id=45 req_method=PUT req_params="map[]" req_path=/v1/policies/opa/example/example-mutation.regon","stream":"stderr","time":"2019-03-15T21:03:28.124645501Z"}
{"log":"time="2019-03-15T21:03:28Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=45 req_method=PUT req_path=/v1/policies/opa/example/example-mutation.rego resp_body="{n  "code": "invalid_parameter",n  "message": "error(s) occurred while compiling module(s)",n  "errors": [n    {n      "code": "rego_type_error",n      "message": "multiple default rules named response found",n      "location": {n        "file": "opa/example/example-mutation.rego",n        "row": 11,n        "col": 1n      }n    }n  ]n}n" resp_bytes=339 resp_duration=28.914604 resp_status=400n","stream":"stderr","time":"2019-03-15T21:03:28.153662975Z"}
{"log":"time="2019-03-15T21:03:28Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"aced693d-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"ConfigMap"},"resource":{"group":"","version":"v1","resource":"configmaps"},"name":"example","namespace":"opa","operation":"UPDATE","userInfo":{"username":"system:serviceaccount:opa:default","uid":"33227186-1902-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:opa","system:authenticated"]},"object":{"metadata":{"name":"example","namespace":"opa","uid":"ace7125a-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157747","creationTimestamp":"2019-03-15T20:55:33Z","annotations":{"openpolicyagent.org/policy-status":"{"status":"error","error":{"code":"invalid_parameter","message":"error(s) occurred while compiling module(s)","errors":[{"code":"rego_type_error","message":"multiple default rules named response found","location":{"file":"opa/example/example-mutation.rego","row":11,"col":1}}]}}"}},"data":{"example-mutation.rego":"package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n"}},"oldObject":{"metadata":{"name":"example","namespace":"opa","uid":"ace7125a-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157747","creationTimestamp":"2019-03-15T20:55:33Z"},"data":{"example-mutation.rego":"package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n"}},"dryRun":false}}n" req_id=46 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:28.160950733Z"}
{"log":"time="2019-03-15T21:03:28Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=46 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.343857 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:28.163820013Z"}
{"log":"time="2019-03-15T21:03:28Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n" req_id=47 req_method=PUT req_params="map[]" req_path=/v1/policies/opa/example/example-mutation.regon","stream":"stderr","time":"2019-03-15T21:03:28.167437113Z"}
{"log":"time="2019-03-15T21:03:28Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=47 req_method=PUT req_path=/v1/policies/opa/example/example-mutation.rego resp_body="{n  "code": "invalid_parameter",n  "message": "error(s) occurred while compiling module(s)",n  "errors": [n    {n      "code": "rego_type_error",n      "message": "multiple default rules named response found",n      "location": {n        "file": "opa/example/example-mutation.rego",n        "row": 11,n        "col": 1n      }n    }n  ]n}n" resp_bytes=339 resp_duration=25.117311 resp_status=400n","stream":"stderr","time":"2019-03-15T21:03:28.19251718Z"}
{"log":"time="2019-03-15T21:03:28Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"acf29fe7-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"ConfigMap"},"resource":{"group":"","version":"v1","resource":"configmaps"},"name":"example","namespace":"opa","operation":"UPDATE","userInfo":{"username":"system:serviceaccount:opa:default","uid":"33227186-1902-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:opa","system:authenticated"]},"object":{"metadata":{"name":"example","namespace":"opa","uid":"ace7125a-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157748","creationTimestamp":"2019-03-15T20:55:33Z","annotations":{"openpolicyagent.org/policy-status":"{"status":"error","error":{"code":"invalid_parameter","message":"error(s) occurred while compiling module(s)","errors":[{"code":"rego_type_error","message":"multiple default rules named response found","location":{"file":"opa/example/example-mutation.rego","row":11,"col":1}}]}}"}},"data":{"example-mutation.rego":"package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n"}},"oldObject":{"metadata":{"name":"example","namespace":"opa","uid":"ace7125a-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157748","creationTimestamp":"2019-03-15T20:55:33Z","annotations":{"openpolicyagent.org/policy-status":"{"status":"error","error":{"code":"invalid_parameter","message":"error(s) occurred while compiling module(s)","errors":[{"code":"rego_type_error","message":"multiple default rules named response found","location":{"file":"opa/example/example-mutation.rego","row":11,"col":1}}]}}"}},"data":{"example-mutation.rego":"package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n"}},"dryRun":false}}n" req_id=48 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:28.195085486Z"}
{"log":"time="2019-03-15T21:03:28Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=48 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.13139 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:28.19771922Z"}
{"log":"time="2019-03-15T21:03:29Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"ad8fc721-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157743","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:34Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157743","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:32Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=49 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:29.225247202Z"}
{"log":"time="2019-03-15T21:03:29Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=49 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.751526 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:29.229776557Z"}
{"log":"time="2019-03-15T21:03:29Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"ad902799-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157744","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:34Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157744","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:32Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=50 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:29.231945039Z"}
{"log":"time="2019-03-15T21:03:29Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=50 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.235715 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:29.235817288Z"}
{"log":"time="2019-03-15T21:03:31Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"aec35e33-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157750","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:36Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157750","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:34Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=51 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:31.241324751Z"}
{"log":"time="2019-03-15T21:03:31Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"aec3c860-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157751","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:36Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157751","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:34Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=52 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:31.244334051Z"}
{"log":"time="2019-03-15T21:03:31Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=51 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.089462 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:31.244420373Z"}
{"log":"time="2019-03-15T21:03:31Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=52 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.941401 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:31.24612234Z"}
{"log":"time="2019-03-15T21:03:33Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"aff67c20-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157752","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:38Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157752","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:36Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=53 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:33.254006632Z"}
{"log":"time="2019-03-15T21:03:33Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"aff6a62d-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157753","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:38Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157753","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:36Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=54 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:33.257017277Z"}
{"log":"time="2019-03-15T21:03:33Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=53 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.157213 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:33.257106712Z"}
{"log":"time="2019-03-15T21:03:33Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=54 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.784987 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:33.25719683Z"}
{"log":"time="2019-03-15T21:03:35Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b129a492-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157754","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:40Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157754","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:38Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=55 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:35.267194558Z"}
{"log":"time="2019-03-15T21:03:35Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=55 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.856748 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:35.270250856Z"}
{"log":"time="2019-03-15T21:03:35Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b12b3f17-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157755","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:40Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157755","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:38Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=56 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:35.279099366Z"}
{"log":"time="2019-03-15T21:03:35Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=56 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.377905 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:35.280168789Z"}
{"log":"time="2019-03-15T21:03:37Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b25cd999-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157756","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:42Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157756","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:40Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=57 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:37.280861455Z"}
{"log":"time="2019-03-15T21:03:37Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=57 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.956408 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:37.28486786Z"}
{"log":"time="2019-03-15T21:03:37Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b25e2d99-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157757","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:42Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157757","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:40Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=58 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:37.288374217Z"}
{"log":"time="2019-03-15T21:03:37Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=58 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.097738 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:37.291169509Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"creationTimestamp":"2019-01-17T17:19:21Z","generation":1,"name":"ingress-ok","namespace":"production","resourceVersion":"212222","selfLink":"/apis/extensions/v1beta1/namespaces/production/ingresses/ingress-ok","uid":"077de880-1a7c-11e9-833b-0050568f58c0"},"spec":{"rules":[{"host":"signin.acmecorp.com","http":{"paths":[{"backend":{"serviceName":"nginx","servicePort":80}}]}}]},"status":{"loadBalancer":{}}}n" req_id=59 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/ingresses/production/ingress-okn","stream":"stderr","time":"2019-03-15T21:03:39.12488704Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=59 req_method=PUT req_path=/v1/data/kubernetes/ingresses/production/ingress-ok resp_body= resp_bytes=0 resp_duration=0.562272 resp_status=204n","stream":"stderr","time":"2019-03-15T21:03:39.12508454Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49502" req_body="package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n" req_id=60 req_method=PUT req_params="map[]" req_path=/v1/policies/opa/example/example-mutation.regon","stream":"stderr","time":"2019-03-15T21:03:39.12510583Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-03-12T15:07:06Z","name":"ia","resourceVersion":"5793915","selfLink":"/api/v1/namespaces/ia","uid":"7fe7e626-44d8-11e9-bf55-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=61 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/ian","stream":"stderr","time":"2019-03-15T21:03:39.126043985Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=61 req_method=PUT req_path=/v1/data/kubernetes/namespaces/ia resp_body= resp_bytes=0 resp_duration=0.244341 resp_status=204n","stream":"stderr","time":"2019-03-15T21:03:39.126290834Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"creationTimestamp":"2019-01-17T17:19:37Z","generation":1,"name":"ingress-bad","namespace":"production","resourceVersion":"212242","selfLink":"/apis/extensions/v1beta1/namespaces/production/ingresses/ingress-bad","uid":"1148bce5-1a7c-11e9-833b-0050568f58c0"},"spec":{"rules":[{"host":"acmecorp.com","http":{"paths":[{"backend":{"serviceName":"nginx","servicePort":80}}]}}]},"status":{"loadBalancer":{}}}n" req_id=62 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/ingresses/production/ingress-badn","stream":"stderr","time":"2019-03-15T21:03:39.134707892Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=62 req_method=PUT req_path=/v1/data/kubernetes/ingresses/production/ingress-bad resp_body= resp_bytes=0 resp_duration=0.442972 resp_status=204n","stream":"stderr","time":"2019-03-15T21:03:39.134807444Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-01-15T19:57:22Z","name":"default","resourceVersion":"11","selfLink":"/api/v1/namespaces/default","uid":"c5a3fb79-18ff-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=63 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/defaultn","stream":"stderr","time":"2019-03-15T21:03:39.134830489Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=63 req_method=PUT req_path=/v1/data/kubernetes/namespaces/default resp_body= resp_bytes=0 resp_duration=0.354325 resp_status=204n","stream":"stderr","time":"2019-03-15T21:03:39.13484619Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-01-15T19:57:22Z","name":"kube-public","resourceVersion":"39","selfLink":"/api/v1/namespaces/kube-public","uid":"c5ac25c3-18ff-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=64 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/kube-publicn","stream":"stderr","time":"2019-03-15T21:03:39.134858643Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=64 req_method=PUT req_path=/v1/data/kubernetes/namespaces/kube-public resp_body= resp_bytes=0 resp_duration=0.214179 resp_status=204n","stream":"stderr","time":"2019-03-15T21:03:39.134873865Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-01-15T19:57:22Z","name":"kube-system","resourceVersion":"37","selfLink":"/api/v1/namespaces/kube-system","uid":"c5ab70af-18ff-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=65 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/kube-systemn","stream":"stderr","time":"2019-03-15T21:03:39.134883992Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=65 req_method=PUT req_path=/v1/data/kubernetes/namespaces/kube-system resp_body= resp_bytes=0 resp_duration=0.223367 resp_status=204n","stream":"stderr","time":"2019-03-15T21:03:39.13489843Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"creationTimestamp":"2019-01-15T20:14:44Z","name":"opa","resourceVersion":"1840","selfLink":"/api/v1/namespaces/opa","uid":"332126d8-1902-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=66 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/opan","stream":"stderr","time":"2019-03-15T21:03:39.134908546Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=66 req_method=PUT req_path=/v1/data/kubernetes/namespaces/opa resp_body= resp_bytes=0 resp_duration=0.184326 resp_status=204n","stream":"stderr","time":"2019-03-15T21:03:39.134929904Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"ingress-whitelist":"*.acmecorp.com"},"creationTimestamp":"2019-01-17T17:12:30Z","name":"production","resourceVersion":"211686","selfLink":"/api/v1/namespaces/production","uid":"126b62bd-1a7b-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=67 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/productionn","stream":"stderr","time":"2019-03-15T21:03:39.134941751Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=67 req_method=PUT req_path=/v1/data/kubernetes/namespaces/production resp_body= resp_bytes=0 resp_duration=0.232239 resp_status=204n","stream":"stderr","time":"2019-03-15T21:03:39.134957192Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"ingress-whitelist":"*.qa.acmecorp.com,*.internal.acmecorp.com"},"creationTimestamp":"2019-01-17T17:10:48Z","name":"qa","resourceVersion":"211548","selfLink":"/api/v1/namespaces/qa","uid":"d58c77f6-1a7a-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=68 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/qan","stream":"stderr","time":"2019-03-15T21:03:39.134967289Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=68 req_method=PUT req_path=/v1/data/kubernetes/namespaces/qa resp_body= resp_bytes=0 resp_duration=0.205648 resp_status=204n","stream":"stderr","time":"2019-03-15T21:03:39.13498326Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"ingress-whitelist":"*.acmecorp.com"},"creationTimestamp":"2019-02-01T18:01:34Z","name":"staging","resourceVersion":"1895069","selfLink":"/api/v1/namespaces/staging","uid":"6939f41b-264b-11e9-833b-0050568f58c0"},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}n" req_id=69 req_method=PUT req_params="map[]" req_path=/v1/data/kubernetes/namespaces/stagingn","stream":"stderr","time":"2019-03-15T21:03:39.134994359Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=69 req_method=PUT req_path=/v1/data/kubernetes/namespaces/staging resp_body= resp_bytes=0 resp_duration=0.218874 resp_status=204n","stream":"stderr","time":"2019-03-15T21:03:39.135009566Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49502" req_id=60 req_method=PUT req_path=/v1/policies/opa/example/example-mutation.rego resp_body="{n  "code": "invalid_parameter",n  "message": "error(s) occurred while compiling module(s)",n  "errors": [n    {n      "code": "rego_type_error",n      "message": "multiple default rules named response found",n      "location": {n        "file": "opa/opa-default-system-main/main",n        "row": 11,n        "col": 1n      }n    }n  ]n}n" resp_bytes=338 resp_duration=35.026438 resp_status=400n","stream":"stderr","time":"2019-03-15T21:03:39.159347912Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b37d5242-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"ConfigMap"},"resource":{"group":"","version":"v1","resource":"configmaps"},"name":"example","namespace":"opa","operation":"UPDATE","userInfo":{"username":"system:serviceaccount:opa:default","uid":"33227186-1902-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:opa","system:authenticated"]},"object":{"metadata":{"name":"example","namespace":"opa","uid":"ace7125a-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157748","creationTimestamp":"2019-03-15T20:55:33Z","annotations":{"openpolicyagent.org/policy-status":"{"status":"error","error":{"code":"invalid_parameter","message":"error(s) occurred while compiling module(s)","errors":[{"code":"rego_type_error","message":"multiple default rules named response found","location":{"file":"opa/opa-default-system-main/main","row":11,"col":1}}]}}"}},"data":{"example-mutation.rego":"package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n"}},"oldObject":{"metadata":{"name":"example","namespace":"opa","uid":"ace7125a-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157748","creationTimestamp":"2019-03-15T20:55:33Z","annotations":{"openpolicyagent.org/policy-status":"{"status":"error","error":{"code":"invalid_parameter","message":"error(s) occurred while compiling module(s)","errors":[{"code":"rego_type_error","message":"multiple default rules named response found","location":{"file":"opa/example/example-mutation.rego","row":11,"col":1}}]}}"}},"data":{"example-mutation.rego":"package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n"}},"dryRun":false}}n" req_id=70 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:39.170646691Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=70 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.432373 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:39.173647161Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49556" req_body="package systemnnimport data.kubernetes.admissionnnmain = {n  "apiVersion": "admission.k8s.io/v1beta1",n  "kind": "AdmissionReview",n  "response": response,n}nndefault response = {"allowed": true}nnresponse = {n    "allowed": false,n    "status": {n        "reason": reason,n    },n} {n    reason = concat(", ", admission.deny)n    reason != ""n}n" req_id=71 req_method=PUT req_params="map[]" req_path=/v1/policies/opa/opa-default-system-main/mainn","stream":"stderr","time":"2019-03-15T21:03:39.177792218Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49556" req_id=71 req_method=PUT req_path=/v1/policies/opa/opa-default-system-main/main resp_body="{}" resp_bytes=2 resp_duration=25.264899 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:39.202525338Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b3829a75-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"ConfigMap"},"resource":{"group":"","version":"v1","resource":"configmaps"},"name":"opa-default-system-main","namespace":"opa","operation":"UPDATE","userInfo":{"username":"system:serviceaccount:opa:default","uid":"33227186-1902-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:opa","system:authenticated"]},"object":{"metadata":{"name":"opa-default-system-main","namespace":"opa","uid":"61413a96-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157595","creationTimestamp":"2019-03-15T20:53:26Z","annotations":{"openpolicyagent.org/policy-status":"{"status":"ok"}"}},"data":{"main":"package systemnnimport data.kubernetes.admissionnnmain = {n  "apiVersion": "admission.k8s.io/v1beta1",n  "kind": "AdmissionReview",n  "response": response,n}nndefault response = {"allowed": true}nnresponse = {n    "allowed": false,n    "status": {n        "reason": reason,n    },n} {n    reason = concat(", ", admission.deny)n    reason != ""n}n"}},"oldObject":{"metadata":{"name":"opa-default-system-main","namespace":"opa","uid":"61413a96-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157595","creationTimestamp":"2019-03-15T20:53:26Z","annotations":{"openpolicyagent.org/policy-status":"{"status":"ok"}"}},"data":{"main":"package systemnnimport data.kubernetes.admissionnnmain = {n  "apiVersion": "admission.k8s.io/v1beta1",n  "kind": "AdmissionReview",n  "response": response,n}nndefault response = {"allowed": true}nnresponse = {n    "allowed": false,n    "status": {n        "reason": reason,n    },n} {n    reason = concat(", ", admission.deny)n    reason != ""n}n"}},"dryRun":false}}n" req_id=72 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:39.204802334Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=72 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.901613 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:39.207360312Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="127.0.0.1:49500" req_body="package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n" req_id=73 req_method=PUT req_params="map[]" req_path=/v1/policies/opa/example/example-mutation.regon","stream":"stderr","time":"2019-03-15T21:03:39.210247438Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="127.0.0.1:49500" req_id=73 req_method=PUT req_path=/v1/policies/opa/example/example-mutation.rego resp_body="{n  "code": "invalid_parameter",n  "message": "error(s) occurred while compiling module(s)",n  "errors": [n    {n      "code": "rego_type_error",n      "message": "multiple default rules named response found",n      "location": {n        "file": "opa/opa-default-system-main/main",n        "row": 11,n        "col": 1n      }n    }n  ]n}n" resp_bytes=338 resp_duration=28.563883 resp_status=400n","stream":"stderr","time":"2019-03-15T21:03:39.2383433Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b388137e-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"ConfigMap"},"resource":{"group":"","version":"v1","resource":"configmaps"},"name":"example","namespace":"opa","operation":"UPDATE","userInfo":{"username":"system:serviceaccount:opa:default","uid":"33227186-1902-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:opa","system:authenticated"]},"object":{"metadata":{"name":"example","namespace":"opa","uid":"ace7125a-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157763","creationTimestamp":"2019-03-15T20:55:33Z","annotations":{"openpolicyagent.org/policy-status":"{"status":"error","error":{"code":"invalid_parameter","message":"error(s) occurred while compiling module(s)","errors":[{"code":"rego_type_error","message":"multiple default rules named response found","location":{"file":"opa/opa-default-system-main/main","row":11,"col":1}}]}}"}},"data":{"example-mutation.rego":"package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n"}},"oldObject":{"metadata":{"name":"example","namespace":"opa","uid":"ace7125a-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157763","creationTimestamp":"2019-03-15T20:55:33Z","annotations":{"openpolicyagent.org/policy-status":"{"status":"error","error":{"code":"invalid_parameter","message":"error(s) occurred while compiling module(s)","errors":[{"code":"rego_type_error","message":"multiple default rules named response found","location":{"file":"opa/opa-default-system-main/main","row":11,"col":1}}]}}"}},"data":{"example-mutation.rego":"package systemnn# Entry point to the policy. This is queried by the Kubernetes apiserver.nmain = {n    "apiVersion": "admission.k8s.io/v1beta1",n    "kind": "AdmissionReview",n    "response": response,n}nn# If no other responses are defined, allow the request.ndefault response = {n    "allowed": truen}nn# Mutate the request if any there are any patches.nresponse = {n    "allowed": true,n    "patchType": "JSONPatch",n    "patch": base64url.encode(json.marshal(patches)),n} {n    patches := [p | p := patch[_][_]] # iterate over all patches and generate a flattened arrayn    count(patches) u003e 0n}nn# Note: patch generates a _set_ of arrays. The ordering of the set is not defined.n# If you need to define ordering across patches, generate them inside the same rule.npatch[[n    {n        "op": "add",n        "path": "/metadata/annotations/foo",n        "value": "bar",n    }n]] {n    n    # Only apply mutations to objects in create/update operations (notn    # delete/connect operations.)n    is_create_or_updatenn    # If the resource has the "test-mutation" annotation key, the patch will ben    # generated and applied to the resource.n    input.request.object.metadata.annotations["test-mutation"]n}nnis_create_or_update { is_create }nis_create_or_update { is_update }nis_create { input.request.operation == "CREATE" }nis_update { input.request.operation == "UPDATE" }n"}},"dryRun":false}}n" req_id=74 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:39.242787962Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=74 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.868466 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:39.244661013Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b39013a3-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157758","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:44Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157758","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:42Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=75 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:39.293114492Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=75 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.639837 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:39.295560751Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b3910606-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157759","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:44Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157759","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:42Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=76 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:39.301819886Z"}
{"log":"time="2019-03-15T21:03:39Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=76 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.620142 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:39.301877739Z"}
{"log":"time="2019-03-15T21:03:41Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b4c3061a-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157764","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:46Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157764","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:44Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=77 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:41.307876441Z"}
{"log":"time="2019-03-15T21:03:41Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=77 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.37458 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:41.308599353Z"}
{"log":"time="2019-03-15T21:03:41Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b4c887c8-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157765","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:46Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157765","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:44Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=78 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:41.340986247Z"}
{"log":"time="2019-03-15T21:03:41Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=78 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.688502 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:41.343327179Z"}
{"log":"time="2019-03-15T21:03:43Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b5f6189b-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157766","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:48Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157766","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:46Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=79 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:43.317424028Z"}
{"log":"time="2019-03-15T21:03:43Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=79 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.222901 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:43.320420264Z"}
{"log":"time="2019-03-15T21:03:43Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b5fb435c-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157767","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:48Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157767","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:46Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=80 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:43.35129652Z"}
{"log":"time="2019-03-15T21:03:43Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=80 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.409494 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:43.355417264Z"}
{"log":"time="2019-03-15T21:03:45Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b7292042-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157768","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:50Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157768","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:48Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=81 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:45.330279567Z"}
{"log":"time="2019-03-15T21:03:45Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=81 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.128333 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:45.332693547Z"}
{"log":"time="2019-03-15T21:03:45Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b72ead17-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157769","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:50Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157769","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:48Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=82 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:45.365828109Z"}
{"log":"time="2019-03-15T21:03:45Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=82 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.986935 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:45.368537214Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b79d78e8-4764-11e9-bf55-0050568f58c0","kind":{"group":"apps","version":"v1","kind":"Deployment"},"resource":{"group":"apps","version":"v1","resource":"deployments"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"kubernetes-admin","groups":["system:masters","system:authenticated"]},"object":{"metadata":{"name":"nginx","creationTimestamp":null,"labels":{"run":"nginx"}},"spec":{"replicas":1,"selector":{"matchLabels":{"run":"nginx"}},"template":{"metadata":{"creationTimestamp":null,"labels":{"run":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx","resources":{},"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","securityContext":{},"schedulerName":"default-scheduler"}},"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":"25%","maxSurge":"25%"}},"revisionHistoryLimit":10,"progressDeadlineSeconds":600},"status":{}},"oldObject":null,"dryRun":false}}n" req_id=83 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:46.092266208Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=83 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.279341 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:46.095235081Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b79fc4e4-4764-11e9-bf55-0050568f58c0","kind":{"group":"apps","version":"v1","kind":"ReplicaSet"},"resource":{"group":"apps","version":"v1","resource":"replicasets"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"system:serviceaccount:kube-system:deployment-controller","uid":"c8c3b7d3-18ff-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"]},"object":{"metadata":{"name":"nginx-7cdbd8cdc9","namespace":"opa","creationTimestamp":null,"labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"},"annotations":{"deployment.kubernetes.io/desired-replicas":"1","deployment.kubernetes.io/max-replicas":"2","deployment.kubernetes.io/revision":"1"},"ownerReferences":[{"apiVersion":"apps/v1","kind":"Deployment","name":"nginx","uid":"b79e3f3f-4764-11e9-bf55-0050568f58c0","controller":true,"blockOwnerDeletion":true}]},"spec":{"replicas":1,"selector":{"matchLabels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"template":{"metadata":{"creationTimestamp":null,"labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx","resources":{},"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","securityContext":{},"schedulerName":"default-scheduler"}}},"status":{"replicas":0}},"oldObject":null,"dryRun":false}}n" req_id=84 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:46.107002377Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=84 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.038176 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:46.109797462Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b7a1617d-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Event"},"resource":{"group":"","version":"v1","resource":"events"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"system:serviceaccount:kube-system:deployment-controller","uid":"c8c3b7d3-18ff-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"]},"object":{"metadata":{"name":"nginx.158c3d481c6186ab","namespace":"opa","creationTimestamp":null},"involvedObject":{"kind":"Deployment","namespace":"opa","name":"nginx","uid":"b79e3f3f-4764-11e9-bf55-0050568f58c0","apiVersion":"apps/v1","resourceVersion":"6157772"},"reason":"ScalingReplicaSet","message":"Scaled up replica set nginx-7cdbd8cdc9 to 1","source":{"component":"deployment-controller"},"firstTimestamp":"2019-03-15T20:55:51Z","lastTimestamp":"2019-03-15T20:55:51Z","count":1,"type":"Normal","eventTime":null,"reportingComponent":"","reportingInstance":""},"oldObject":null,"dryRun":false}}n" req_id=85 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:46.117807382Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=85 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.103727 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:46.120402111Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b7a2a9c2-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Pod"},"resource":{"group":"","version":"v1","resource":"pods"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"system:serviceaccount:kube-system:replicaset-controller","uid":"c8124d6a-18ff-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"]},"object":{"metadata":{"generateName":"nginx-7cdbd8cdc9-","creationTimestamp":null,"labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"},"ownerReferences":[{"apiVersion":"apps/v1","kind":"ReplicaSet","name":"nginx-7cdbd8cdc9","uid":"b7a07528-4764-11e9-bf55-0050568f58c0","controller":true,"blockOwnerDeletion":true}]},"spec":{"volumes":[{"name":"default-token-rhjhg","secret":{"secretName":"default-token-rhjhg"}}],"containers":[{"name":"nginx","image":"nginx","resources":{},"volumeMounts":[{"name":"default-token-rhjhg","readOnly":true,"mountPath":"/var/run/secrets/kubernetes.io/serviceaccount"}],"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","serviceAccountName":"default","serviceAccount":"default","securityContext":{},"schedulerName":"default-scheduler","tolerations":[{"key":"node.kubernetes.io/not-ready","operator":"Exists","effect":"NoExecute","tolerationSeconds":300},{"key":"node.kubernetes.io/unreachable","operator":"Exists","effect":"NoExecute","tolerationSeconds":300}],"priority":0,"enableServiceLinks":true},"status":{}},"oldObject":null,"dryRun":false}}n" req_id=86 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:46.125760269Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=86 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.003914 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:46.128503508Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b7a8b69e-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Event"},"resource":{"group":"","version":"v1","resource":"events"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"system:serviceaccount:kube-system:replicaset-controller","uid":"c8124d6a-18ff-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"]},"object":{"metadata":{"name":"nginx-7cdbd8cdc9.158c3d481f516e8a","namespace":"opa","creationTimestamp":null},"involvedObject":{"kind":"ReplicaSet","namespace":"opa","name":"nginx-7cdbd8cdc9","uid":"b7a07528-4764-11e9-bf55-0050568f58c0","apiVersion":"apps/v1","resourceVersion":"6157773"},"reason":"SuccessfulCreate","message":"Created pod: nginx-7cdbd8cdc9-qskxs","source":{"component":"replicaset-controller"},"firstTimestamp":"2019-03-15T20:55:51Z","lastTimestamp":"2019-03-15T20:55:51Z","count":1,"type":"Normal","eventTime":null,"reportingComponent":"","reportingInstance":""},"oldObject":null,"dryRun":false}}n" req_id=87 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:46.165443516Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=87 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.419947 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:46.170292543Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b7a95698-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Event"},"resource":{"group":"","version":"v1","resource":"events"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"nginx-7cdbd8cdc9-qskxs.158c3d481f99d4f9","namespace":"opa","creationTimestamp":null},"involvedObject":{"kind":"Pod","namespace":"opa","name":"nginx-7cdbd8cdc9-qskxs","uid":"b7a34beb-4764-11e9-bf55-0050568f58c0","apiVersion":"v1","resourceVersion":"6157777"},"reason":"Scheduled","message":"Successfully assigned opa/nginx-7cdbd8cdc9-qskxs to lbcdsrvv0005","source":{"component":"default-scheduler"},"firstTimestamp":"2019-03-15T20:55:51Z","lastTimestamp":"2019-03-15T20:55:51Z","count":1,"type":"Normal","eventTime":null,"reportingComponent":"","reportingInstance":""},"oldObject":null,"dryRun":false}}n" req_id=88 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:46.17178913Z"}
{"log":"time="2019-03-15T21:03:46Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=88 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=5.106062 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:46.175725266Z"}
{"log":"time="2019-03-15T21:03:47Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b85c6864-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157770","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:52Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157770","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:50Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=89 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:47.349376222Z"}
{"log":"time="2019-03-15T21:03:47Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b85ce816-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Event"},"resource":{"group":"","version":"v1","resource":"events"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"system:node:lbcdsrvv0005","groups":["system:nodes","system:authenticated"]},"object":{"metadata":{"name":"nginx-7cdbd8cdc9-qskxs.158c3db6e951e450","namespace":"opa","creationTimestamp":null},"involvedObject":{"kind":"Pod","namespace":"opa","name":"nginx-7cdbd8cdc9-qskxs","uid":"b7a34beb-4764-11e9-bf55-0050568f58c0","apiVersion":"v1","resourceVersion":"6157779","fieldPath":"spec.containers{nginx}"},"reason":"Pulling","message":"pulling image "nginx"","source":{"component":"kubelet","host":"lbcdsrvv0005"},"firstTimestamp":"2019-03-15T21:03:47Z","lastTimestamp":"2019-03-15T21:03:47Z","count":1,"type":"Normal","eventTime":null,"reportingComponent":"","reportingInstance":""},"oldObject":null,"dryRun":false}}n" req_id=90 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:47.349444728Z"}
{"log":"time="2019-03-15T21:03:47Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=89 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.577513 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:47.349485114Z"}
{"log":"time="2019-03-15T21:03:47Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=90 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.758079 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:47.349499011Z"}
{"log":"time="2019-03-15T21:03:47Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b86184f3-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157771","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:52Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157771","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:50Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=91 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:47.376573569Z"}
{"log":"time="2019-03-15T21:03:47Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=91 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.162643 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:47.379653089Z"}
{"log":"time="2019-03-15T21:03:49Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b98f8c28-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157785","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:54Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157785","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:52Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=92 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:49.356442216Z"}
{"log":"time="2019-03-15T21:03:49Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=92 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.407051 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:49.359581067Z"}
{"log":"time="2019-03-15T21:03:49Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"b9947800-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157787","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:54Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157787","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:52Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=93 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:49.388188162Z"}
{"log":"time="2019-03-15T21:03:49Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=93 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.193191 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:49.391113984Z"}
{"log":"time="2019-03-15T21:03:51Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"bac2adbc-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157791","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:56Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157791","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:54Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=94 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:51.369247768Z"}
{"log":"time="2019-03-15T21:03:51Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=94 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.117986 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:51.372066675Z"}
{"log":"time="2019-03-15T21:03:51Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"bac75085-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157792","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:56Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157792","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:54Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=95 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:51.399285435Z"}
{"log":"time="2019-03-15T21:03:51Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=95 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.98807 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:51.402931155Z"}
{"log":"time="2019-03-15T21:03:53Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"bbf5bdfe-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157793","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:58Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157793","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:56Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=96 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:53.381731718Z"}
{"log":"time="2019-03-15T21:03:53Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=96 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.265346 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:53.384715298Z"}
{"log":"time="2019-03-15T21:03:53Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"bbfa40d9-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157794","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:58Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157794","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:56Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=97 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:53.411411032Z"}
{"log":"time="2019-03-15T21:03:53Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=97 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.914606 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:53.414104387Z"}
{"log":"time="2019-03-15T21:03:55Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"bd28d73d-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157795","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:00Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157795","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:55:58Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=98 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:55.394141838Z"}
{"log":"time="2019-03-15T21:03:55Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=98 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.335924 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:55.39770881Z"}
{"log":"time="2019-03-15T21:03:55Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"bd2d1959-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157796","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:00Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157796","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:55:58Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=99 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:55.421968921Z"}
{"log":"time="2019-03-15T21:03:55Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=99 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.890053 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:55.424686884Z"}
{"log":"time="2019-03-15T21:03:57Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"be5c1127-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157797","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:02Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157797","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:00Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=100 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:57.410811931Z"}
{"log":"time="2019-03-15T21:03:57Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=100 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.266433 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:57.413848758Z"}
{"log":"time="2019-03-15T21:03:57Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"be5ff67d-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157798","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:02Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157798","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:00Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=101 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:57.436759028Z"}
{"log":"time="2019-03-15T21:03:57Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=101 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.81445 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:57.436822557Z"}
{"log":"time="2019-03-15T21:03:59Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"bf8f48bc-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157799","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:04Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157799","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:02Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=102 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:59.425802671Z"}
{"log":"time="2019-03-15T21:03:59Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=102 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=7.611463 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:59.431785482Z"}
{"log":"time="2019-03-15T21:03:59Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"bf92cd55-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157801","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:04Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157801","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:02Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=103 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:03:59.447346683Z"}
{"log":"time="2019-03-15T21:03:59Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=103 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.907333 resp_status=200n","stream":"stderr","time":"2019-03-15T21:03:59.44739319Z"}
{"log":"time="2019-03-15T21:04:00Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c050365e-4764-11e9-bf55-0050568f58c0","kind":{"group":"extensions","version":"v1beta1","kind":"Deployment"},"resource":{"group":"extensions","version":"v1beta1","resource":"deployments"},"name":"nginx","namespace":"opa","operation":"UPDATE","userInfo":{"username":"kubernetes-admin","groups":["system:masters","system:authenticated"]},"object":{"metadata":{"name":"nginx","namespace":"opa","uid":"b79e3f3f-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157783","generation":1,"creationTimestamp":"2019-03-15T20:55:51Z","labels":{"run":"nginx"},"annotations":{"deployment.kubernetes.io/revision":"1","test-mutation":"true"}},"spec":{"replicas":1,"selector":{"matchLabels":{"run":"nginx"}},"template":{"metadata":{"creationTimestamp":null,"labels":{"run":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx","resources":{},"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","securityContext":{},"schedulerName":"default-scheduler"}},"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":"25%","maxSurge":"25%"}},"revisionHistoryLimit":10,"progressDeadlineSeconds":600},"status":{"observedGeneration":1,"replicas":1,"updatedReplicas":1,"unavailableReplicas":1,"conditions":[{"type":"Available","status":"False","lastUpdateTime":"2019-03-15T20:55:51Z","lastTransitionTime":"2019-03-15T20:55:51Z","reason":"MinimumReplicasUnavailable","message":"Deployment does not have minimum availability."},{"type":"Progressing","status":"True","lastUpdateTime":"2019-03-15T20:55:51Z","lastTransitionTime":"2019-03-15T20:55:51Z","reason":"ReplicaSetUpdated","message":"ReplicaSet "nginx-7cdbd8cdc9" is progressing."}]}},"oldObject":{"metadata":{"name":"nginx","namespace":"opa","uid":"b79e3f3f-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157783","generation":1,"creationTimestamp":"2019-03-15T20:55:51Z","labels":{"run":"nginx"},"annotations":{"deployment.kubernetes.io/revision":"1"}},"spec":{"replicas":1,"selector":{"matchLabels":{"run":"nginx"}},"template":{"metadata":{"creationTimestamp":null,"labels":{"run":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx","resources":{},"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","securityContext":{},"schedulerName":"default-scheduler"}},"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxUnavailable":"25%","maxSurge":"25%"}},"revisionHistoryLimit":10,"progressDeadlineSeconds":600},"status":{"observedGeneration":1,"replicas":1,"updatedReplicas":1,"unavailableReplicas":1,"conditions":[{"type":"Available","status":"False","lastUpdateTime":"2019-03-15T20:55:51Z","lastTransitionTime":"2019-03-15T20:55:51Z","reason":"MinimumReplicasUnavailable","message":"Deployment does not have minimum availability."},{"type":"Progressing","status":"True","lastUpdateTime":"2019-03-15T20:55:51Z","lastTransitionTime":"2019-03-15T20:55:51Z","reason":"ReplicaSetUpdated","message":"ReplicaSet "nginx-7cdbd8cdc9" is progressing."}]}},"dryRun":false}}n" req_id=104 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:00.690840022Z"}
{"log":"time="2019-03-15T21:04:00Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=104 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=4.342855 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:00.692482695Z"}
{"log":"time="2019-03-15T21:04:00Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c052b4c1-4764-11e9-bf55-0050568f58c0","kind":{"group":"apps","version":"v1","kind":"ReplicaSet"},"resource":{"group":"apps","version":"v1","resource":"replicasets"},"name":"nginx-7cdbd8cdc9","namespace":"opa","operation":"UPDATE","userInfo":{"username":"system:serviceaccount:kube-system:deployment-controller","uid":"c8c3b7d3-18ff-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"]},"object":{"metadata":{"name":"nginx-7cdbd8cdc9","namespace":"opa","selfLink":"/apis/apps/v1/namespaces/opa/replicasets/nginx-7cdbd8cdc9","uid":"b7a07528-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157781","generation":1,"creationTimestamp":"2019-03-15T20:55:51Z","labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"},"annotations":{"deployment.kubernetes.io/desired-replicas":"1","deployment.kubernetes.io/max-replicas":"2","deployment.kubernetes.io/revision":"1","deployment.kubernetes.io/revision-history":"1","test-mutation":"true"},"ownerReferences":[{"apiVersion":"apps/v1","kind":"Deployment","name":"nginx","uid":"b79e3f3f-4764-11e9-bf55-0050568f58c0","controller":true,"blockOwnerDeletion":true}]},"spec":{"replicas":1,"selector":{"matchLabels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"template":{"metadata":{"creationTimestamp":null,"labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx","resources":{},"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","securityContext":{},"schedulerName":"default-scheduler"}}},"status":{"replicas":1,"fullyLabeledReplicas":1,"observedGeneration":1}},"oldObject":{"metadata":{"name":"nginx-7cdbd8cdc9","namespace":"opa","uid":"b7a07528-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157781","generation":1,"creationTimestamp":"2019-03-15T20:55:51Z","labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"},"annotations":{"deployment.kubernetes.io/desired-replicas":"1","deployment.kubernetes.io/max-replicas":"2","deployment.kubernetes.io/revision":"1"},"ownerReferences":[{"apiVersion":"apps/v1","kind":"Deployment","name":"nginx","uid":"b79e3f3f-4764-11e9-bf55-0050568f58c0","controller":true,"blockOwnerDeletion":true}]},"spec":{"replicas":1,"selector":{"matchLabels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"template":{"metadata":{"creationTimestamp":null,"labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx","resources":{},"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","securityContext":{},"schedulerName":"default-scheduler"}}},"status":{"replicas":1,"fullyLabeledReplicas":1,"observedGeneration":1}},"dryRun":false}}n" req_id=105 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:00.705816777Z"}
{"log":"time="2019-03-15T21:04:00Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=105 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.52721 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:00.708945851Z"}
{"log":"time="2019-03-15T21:04:00Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c0542d37-4764-11e9-bf55-0050568f58c0","kind":{"group":"apps","version":"v1","kind":"ReplicaSet"},"resource":{"group":"apps","version":"v1","resource":"replicasets"},"name":"nginx-7cdbd8cdc9","namespace":"opa","operation":"UPDATE","userInfo":{"username":"system:serviceaccount:kube-system:deployment-controller","uid":"c8c3b7d3-18ff-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"]},"object":{"metadata":{"name":"nginx-7cdbd8cdc9","namespace":"opa","selfLink":"/apis/apps/v1/namespaces/opa/replicasets/nginx-7cdbd8cdc9","uid":"b7a07528-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157781","generation":1,"creationTimestamp":"2019-03-15T20:55:51Z","labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"},"annotations":{"deployment.kubernetes.io/desired-replicas":"1","deployment.kubernetes.io/max-replicas":"2","deployment.kubernetes.io/revision":"1","deployment.kubernetes.io/revision-history":"1","test-mutation":"true"},"ownerReferences":[{"apiVersion":"apps/v1","kind":"Deployment","name":"nginx","uid":"b79e3f3f-4764-11e9-bf55-0050568f58c0","controller":true,"blockOwnerDeletion":true}]},"spec":{"replicas":1,"selector":{"matchLabels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"template":{"metadata":{"creationTimestamp":null,"labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx","resources":{},"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","securityContext":{},"schedulerName":"default-scheduler"}}},"status":{"replicas":1,"fullyLabeledReplicas":1,"observedGeneration":1}},"oldObject":{"metadata":{"name":"nginx-7cdbd8cdc9","namespace":"opa","uid":"b7a07528-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157807","generation":1,"creationTimestamp":"2019-03-15T20:55:51Z","labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"},"annotations":{"deployment.kubernetes.io/desired-replicas":"1","deployment.kubernetes.io/max-replicas":"2","deployment.kubernetes.io/revision":"1","deployment.kubernetes.io/revision-history":"1","test-mutation":"true"},"ownerReferences":[{"apiVersion":"apps/v1","kind":"Deployment","name":"nginx","uid":"b79e3f3f-4764-11e9-bf55-0050568f58c0","controller":true,"blockOwnerDeletion":true}]},"spec":{"replicas":1,"selector":{"matchLabels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"template":{"metadata":{"creationTimestamp":null,"labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx","resources":{},"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","securityContext":{},"schedulerName":"default-scheduler"}}},"status":{"replicas":1,"fullyLabeledReplicas":1,"observedGeneration":1}},"dryRun":false}}n" req_id=106 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:00.714895763Z"}
{"log":"time="2019-03-15T21:04:00Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=106 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.478893 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:00.717974919Z"}
{"log":"time="2019-03-15T21:04:00Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c05596ee-4764-11e9-bf55-0050568f58c0","kind":{"group":"apps","version":"v1","kind":"ReplicaSet"},"resource":{"group":"apps","version":"v1","resource":"replicasets"},"name":"nginx-7cdbd8cdc9","namespace":"opa","operation":"UPDATE","userInfo":{"username":"system:serviceaccount:kube-system:deployment-controller","uid":"c8c3b7d3-18ff-11e9-833b-0050568f58c0","groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"]},"object":{"metadata":{"name":"nginx-7cdbd8cdc9","namespace":"opa","selfLink":"/apis/apps/v1/namespaces/opa/replicasets/nginx-7cdbd8cdc9","uid":"b7a07528-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157781","generation":1,"creationTimestamp":"2019-03-15T20:55:51Z","labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"},"annotations":{"deployment.kubernetes.io/desired-replicas":"1","deployment.kubernetes.io/max-replicas":"2","deployment.kubernetes.io/revision":"1","deployment.kubernetes.io/revision-history":"1","test-mutation":"true"},"ownerReferences":[{"apiVersion":"apps/v1","kind":"Deployment","name":"nginx","uid":"b79e3f3f-4764-11e9-bf55-0050568f58c0","controller":true,"blockOwnerDeletion":true}]},"spec":{"replicas":1,"selector":{"matchLabels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"template":{"metadata":{"creationTimestamp":null,"labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx","resources":{},"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","securityContext":{},"schedulerName":"default-scheduler"}}},"status":{"replicas":1,"fullyLabeledReplicas":1,"observedGeneration":1}},"oldObject":{"metadata":{"name":"nginx-7cdbd8cdc9","namespace":"opa","uid":"b7a07528-4764-11e9-bf55-0050568f58c0","resourceVersion":"6157807","generation":1,"creationTimestamp":"2019-03-15T20:55:51Z","labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"},"annotations":{"deployment.kubernetes.io/desired-replicas":"1","deployment.kubernetes.io/max-replicas":"2","deployment.kubernetes.io/revision":"1","deployment.kubernetes.io/revision-history":"1","test-mutation":"true"},"ownerReferences":[{"apiVersion":"apps/v1","kind":"Deployment","name":"nginx","uid":"b79e3f3f-4764-11e9-bf55-0050568f58c0","controller":true,"blockOwnerDeletion":true}]},"spec":{"replicas":1,"selector":{"matchLabels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"template":{"metadata":{"creationTimestamp":null,"labels":{"pod-template-hash":"7cdbd8cdc9","run":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx","resources":{},"terminationMessagePath":"/dev/termination-log","terminationMessagePolicy":"File","imagePullPolicy":"Always"}],"restartPolicy":"Always","terminationGracePeriodSeconds":30,"dnsPolicy":"ClusterFirst","securityContext":{},"schedulerName":"default-scheduler"}}},"status":{"replicas":1,"fullyLabeledReplicas":1,"observedGeneration":1}},"dryRun":false}}n" req_id=107 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:00.725390617Z"}
{"log":"time="2019-03-15T21:04:00Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=107 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.703332 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:00.725463475Z"}
{"log":"time="2019-03-15T21:04:01Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c0c331f5-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157804","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:06Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157804","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:04Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=108 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:01.445174054Z"}
{"log":"time="2019-03-15T21:04:01Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=108 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=6.347588 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:01.445574986Z"}
{"log":"time="2019-03-15T21:04:01Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c0c5a33f-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157805","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:06Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157805","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:04Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=109 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:01.457718758Z"}
{"log":"time="2019-03-15T21:04:01Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=109 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.960709 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:01.457768677Z"}
{"log":"time="2019-03-15T21:04:02Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c13d37a3-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Event"},"resource":{"group":"","version":"v1","resource":"events"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"system:node:lbcdsrvv0005","groups":["system:nodes","system:authenticated"]},"object":{"metadata":{"name":"nginx-7cdbd8cdc9-qskxs.158c3dba60e7fc34","namespace":"opa","creationTimestamp":null},"involvedObject":{"kind":"Pod","namespace":"opa","name":"nginx-7cdbd8cdc9-qskxs","uid":"b7a34beb-4764-11e9-bf55-0050568f58c0","apiVersion":"v1","resourceVersion":"6157779","fieldPath":"spec.containers{nginx}"},"reason":"Pulled","message":"Successfully pulled image "nginx"","source":{"component":"kubelet","host":"lbcdsrvv0005"},"firstTimestamp":"2019-03-15T21:04:02Z","lastTimestamp":"2019-03-15T21:04:02Z","count":1,"type":"Normal","eventTime":null,"reportingComponent":"","reportingInstance":""},"oldObject":null,"dryRun":false}}n" req_id=110 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:02.242814463Z"}
{"log":"time="2019-03-15T21:04:02Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=110 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.856847 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:02.24288968Z"}
{"log":"time="2019-03-15T21:04:02Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c1411052-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Event"},"resource":{"group":"","version":"v1","resource":"events"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"system:node:lbcdsrvv0005","groups":["system:nodes","system:authenticated"]},"object":{"metadata":{"name":"nginx-7cdbd8cdc9-qskxs.158c3dba627ba8aa","namespace":"opa","creationTimestamp":null},"involvedObject":{"kind":"Pod","namespace":"opa","name":"nginx-7cdbd8cdc9-qskxs","uid":"b7a34beb-4764-11e9-bf55-0050568f58c0","apiVersion":"v1","resourceVersion":"6157779","fieldPath":"spec.containers{nginx}"},"reason":"Created","message":"Created container","source":{"component":"kubelet","host":"lbcdsrvv0005"},"firstTimestamp":"2019-03-15T21:04:02Z","lastTimestamp":"2019-03-15T21:04:02Z","count":1,"type":"Normal","eventTime":null,"reportingComponent":"","reportingInstance":""},"oldObject":null,"dryRun":false}}n" req_id=111 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:02.267411503Z"}
{"log":"time="2019-03-15T21:04:02Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=111 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=5.623371 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:02.270320622Z"}
{"log":"time="2019-03-15T21:04:02Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c16cd858-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Event"},"resource":{"group":"","version":"v1","resource":"events"},"namespace":"opa","operation":"CREATE","userInfo":{"username":"system:node:lbcdsrvv0005","groups":["system:nodes","system:authenticated"]},"object":{"metadata":{"name":"nginx-7cdbd8cdc9-qskxs.158c3dba738c5946","namespace":"opa","creationTimestamp":null},"involvedObject":{"kind":"Pod","namespace":"opa","name":"nginx-7cdbd8cdc9-qskxs","uid":"b7a34beb-4764-11e9-bf55-0050568f58c0","apiVersion":"v1","resourceVersion":"6157779","fieldPath":"spec.containers{nginx}"},"reason":"Started","message":"Started container","source":{"component":"kubelet","host":"lbcdsrvv0005"},"firstTimestamp":"2019-03-15T21:04:02Z","lastTimestamp":"2019-03-15T21:04:02Z","count":1,"type":"Normal","eventTime":null,"reportingComponent":"","reportingInstance":""},"oldObject":null,"dryRun":false}}n" req_id=112 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:02.555447484Z"}
{"log":"time="2019-03-15T21:04:02Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=112 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=6.604244 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:02.558816729Z"}
{"log":"time="2019-03-15T21:04:03Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c1f6ff58-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157809","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:08Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157809","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:06Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=113 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:03.456416897Z"}
{"log":"time="2019-03-15T21:04:03Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=113 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.885001 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:03.459998467Z"}
{"log":"time="2019-03-15T21:04:03Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c1f8a3b6-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157810","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:08Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157810","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:06Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=114 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:03.467167074Z"}
{"log":"time="2019-03-15T21:04:03Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=114 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.970761 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:03.469477398Z"}
{"log":"time="2019-03-15T21:04:05Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c32a4b3f-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157814","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:10Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157814","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:08Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=115 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:05.47030109Z"}
{"log":"time="2019-03-15T21:04:05Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=115 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.941829 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:05.474078715Z"}
{"log":"time="2019-03-15T21:04:05Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c32b873c-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157815","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:10Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157815","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:08Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=116 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:05.479830475Z"}
{"log":"time="2019-03-15T21:04:05Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=116 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.821969 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:05.480748087Z"}
{"log":"time="2019-03-15T21:04:07Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c45dac8e-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157819","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:12Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157819","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:10Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=117 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:07.484532958Z"}
{"log":"time="2019-03-15T21:04:07Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=117 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.290188 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:07.487599147Z"}
{"log":"time="2019-03-15T21:04:07Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c45e660c-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157820","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:12Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157820","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:10Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=118 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:07.489022676Z"}
{"log":"time="2019-03-15T21:04:07Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=118 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=2.760737 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:07.491448606Z"}
{"log":"time="2019-03-15T21:04:09Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c590b6e4-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-scheduler","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-scheduler","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-scheduler","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157822","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:14Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-scheduler","namespace":"kube-system","uid":"c767f3e0-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157822","creationTimestamp":"2019-01-15T19:57:25Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_575c3937-4433-11e9-bbc6-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:52Z","renewTime":"2019-03-15T20:56:12Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=119 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:09.497288034Z"}
{"log":"time="2019-03-15T21:04:09Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=119 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.690066 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:09.50042486Z"}
{"log":"time="2019-03-15T21:04:09Z" level=info msg="Received request." client_addr="192.168.223.64:54828" req_body="{"kind":"AdmissionReview","apiVersion":"admission.k8s.io/v1beta1","request":{"uid":"c591183d-4764-11e9-bf55-0050568f58c0","kind":{"group":"","version":"v1","kind":"Endpoints"},"resource":{"group":"","version":"v1","resource":"endpoints"},"name":"kube-controller-manager","namespace":"kube-system","operation":"UPDATE","userInfo":{"username":"system:kube-controller-manager","groups":["system:authenticated"]},"object":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/endpoints/kube-controller-manager","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157823","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:14Z","leaderTransitions":2}"}}},"oldObject":{"metadata":{"name":"kube-controller-manager","namespace":"kube-system","uid":"c7ed7460-18ff-11e9-833b-0050568f58c0","resourceVersion":"6157823","creationTimestamp":"2019-01-15T19:57:26Z","annotations":{"control-plane.alpha.kubernetes.io/leader":"{"holderIdentity":"lbcdsrvv0004_5844e106-4433-11e9-8366-0050568f58c0","leaseDurationSeconds":15,"acquireTime":"2019-03-11T19:29:51Z","renewTime":"2019-03-15T20:56:12Z","leaderTransitions":2}"}}},"dryRun":false}}n" req_id=120 req_method=POST req_params="map[timeout:[30s]]" req_path=/n","stream":"stderr","time":"2019-03-15T21:04:09.501017275Z"}
{"log":"time="2019-03-15T21:04:09Z" level=info msg="Sent response." client_addr="192.168.223.64:54828" req_id=120 req_method=POST req_path=/ resp_body="{"apiVersion":"admission.k8s.io/v1beta1","kind":"AdmissionReview","response":{"allowed":true}}" resp_bytes=94 resp_duration=3.084094 resp_status=200n","stream":"stderr","time":"2019-03-15T21:04:09.503968777Z"}

rogeduardo on 15 Mar 2019

@rogeduardo The logs show that OPA returned an error while trying to load example-mutation.rego because there are multiple default response rules defined (you can only have one default per ruleset.) If you look at the configmap that's used to load the example-mutation.rego file you should see the error reported in the status.

What I suggest you do is undeploy the admission controller and delete the configmap containing the example-mutation.rego file. Redeploy the admission controller with the content of opa-default-system-main replaced with the example above.

I highly recommend that you test out the policy locally using opa test, opa eval, etc. before you deploy to Kubernetes as the iteration/feedback delay is much more forgiving.

tsandall on 18 Mar 2019

@tsandall, thank you! Now it worked! I saw where I made the mistake. The admission-controller.yaml from Validating Admission Controller create various object, among them the opa-default-system-main:

---
kind: ConfigMap
apiVersion: v1
metadata:
  name: opa-default-system-main
  namespace: opa
data:
  main: |
    package system

    import data.kubernetes.admission

    main = {
      "apiVersion": "admission.k8s.io/v1beta1",
      "kind": "AdmissionReview",
      "response": response,
    }

    default response = {"allowed": true}

    response = {
        "allowed": false,
        "status": {
            "reason": reason,
        },
    } {
        reason = concat(", ", admission.deny)
        reason != ""
    }

The conflict result from this object. When I dont create it, only yours example (example.rego), it works like a charm! Thank you for your patience. I will let here the admission-controller.yaml which I used for help others newbies like me.

# Grant OPA/kube-mgmt read-only access to resources. This let's kube-mgmt
# replicate resources into OPA so they can be used in policies.
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: opa-viewer
roleRef:
  kind: ClusterRole
  name: view
  apiGroup: rbac.authorization.k8s.io
subjects:
- kind: Group
  name: system:serviceaccounts:opa
  apiGroup: rbac.authorization.k8s.io
---
# Define role for OPA/kube-mgmt to update configmaps with policy status.
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  namespace: opa
  name: configmap-modifier
rules:
- apiGroups: [""]
  resources: ["configmaps"]
  verbs: ["update", "patch"]
---
# Grant OPA/kube-mgmt role defined above.
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  namespace: opa
  name: opa-configmap-modifier
roleRef:
  kind: Role
  name: configmap-modifier
  apiGroup: rbac.authorization.k8s.io
subjects:
- kind: Group
  name: system:serviceaccounts:opa
  apiGroup: rbac.authorization.k8s.io
---
kind: Service
apiVersion: v1
metadata:
  name: opa
  namespace: opa
spec:
  selector:
    app: opa
  ports:
  - name: https
    protocol: TCP
    port: 443
    targetPort: 443
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  labels:
    app: opa
  namespace: opa
  name: opa
spec:
  replicas: 1
  selector:
    matchLabels:
      app: opa
  template:
    metadata:
      labels:
        app: opa
      name: opa
    spec:
      containers:
        # WARNING: OPA is NOT running with an authorization policy configured. This
        # means that clients can read and write policies in OPA. If you are
        # deploying OPA in an insecure environment, be sure to configure
        # authentication and authorization on the daemon. See the Security page for
        # details: https://www.openpolicyagent.org/docs/security.html.
        - name: opa
          image: openpolicyagent/opa:0.10.5
          args:
            - "run"
            - "--server"
            - "--tls-cert-file=/certs/tls.crt"
            - "--tls-private-key-file=/certs/tls.key"
            - "--addr=0.0.0.0:443"
            - "--addr=http://127.0.0.1:8181"
            - "--log-level=debug"
          volumeMounts:
            - readOnly: true
              mountPath: /certs
              name: opa-server
        - name: kube-mgmt
          image: openpolicyagent/kube-mgmt:0.8
          args:
            - "--replicate-cluster=v1/namespaces"
            - "--replicate=extensions/v1beta1/ingresses"
      volumes:
        - name: opa-server
          secret:
            secretName: opa-server

rogeduardo on 18 Mar 2019

Closing this issue because it's going to be handled by Gatekeeper.

tsandall on 18 Apr 2019

I'd like to ask that this be re-opened, since Gatekeeper today does not support mutating webhooks, and an example would be nice until then :+1:

dbirks on 21 Aug 2019

👍12

Was this page helpful?

0 / 5 - 0 ratings