Skip to content

perf: optimize Kubernetes client cache memory usage #2730

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open

perf: optimize Kubernetes client cache memory usage #2730

wants to merge 4 commits into from

Conversation

simar7
Copy link
Member

@simar7 simar7 commented Aug 30, 2025 •
edited
Loading

Description

  • Add isEssentialAnnotation() and isEssentialLabel() helper functions
  • Filter non-essential annotations and labels from cached objects
  • Clear resource versions and managed fields to reduce memory footprint
  • Strip unnecessary metadata while preserving trivy-operator functionality

Related discussion

Checklist

  • I've read the guidelines for contributing to this repository.
  • I've added tests that prove my fix is effective or that my feature works.
  • I've updated the documentation with the relevant information (if needed).
  • I've added usage information (if the PR introduces new options)
  • I've included a "before" and "after" example to the description (if the PR is a user interface change).

@simar7
perf: optimize Kubernetes client cache memory usage
b827919 
- Add isEssentialAnnotation() and isEssentialLabel() helper functions
- Filter non-essential annotations and labels from cached objects
- Clear resource versions and managed fields to reduce memory footprint
- Strip unnecessary metadata while preserving trivy-operator functionality
@simar7 simar7 requested review from afdesk and Copilot August 30, 2025 00:44
Copilot
Copilot AI reviewed Aug 30, 2025
View reviewed changes
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Optimizes Kubernetes client cache memory usage by filtering non-essential metadata from cached objects. The changes introduce helper functions to identify essential annotations and labels, then filter out unnecessary metadata while preserving trivy-operator functionality.

  • Added helper functions to identify essential annotations and labels for trivy-operator
  • Implemented filtering of non-essential metadata in the cache transform function
  • Cleared resource versions and managed fields to reduce memory footprint

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

afdesk
afdesk requested changes Sep 2, 2025
View reviewed changes
pkg/operator/operator.go Outdated
Comment on lines 59 to 64
essentialAnnotations := []string{
"app.kubernetes.io/",
"kubernetes.io/",
"service.kubernetes.io/",
"deployment.kubernetes.io/revision",
}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IIUC isEssentialAnnotation is called a lot of time, so maybe should it be constants to avoid memory allocation for every call?

also I'd consider to use map for some cases like app or version.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Go doesn't have a concept of a constant slice (array), how would you declare this as a constant? I've removed the allocation to a variable if that's what you were after: 1d1fc23

pkg/operator/operator.go Outdated
Comment on lines 143 to 149
filteredAnnotations := make(map[string]string)
for k, v := range annotations {
if isEssentialAnnotation(k) {
filteredAnnotations[k] = v
}
}
metaObj.GetObjectMeta().SetAnnotations(filteredAnnotations)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd consider to look for essetial annotations in existed maps. it seems it should improve time
but maybe it doesn't matter, just idea
it's up to you

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you elaborate on this with an example?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

again, it's just an idea.

IIUC some labels ("app", "version", "tier"...) can be found quickly in the existed mapы - in annotations/labels, right?

about using HasPrefix. Actually i see 2 cases here - "app.kubernetes.io/" labels and trivy-operator specific labels.

for the first case - we can change it by added all common labels - there are only 6 labels: https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/
we can use the same way for trivy-operator's labels - we have a relatively small number of labels, so we could just list them explicitly.

in my opinion, it'll make isEssentialLabel simpler.

@afdesk
Copy link
Contributor

afdesk commented Sep 2, 2025

@simar7 I left small comments, but it doesn't matter and up to you.
actually I can't run Trivy-operator with this change:

$ kind delete cluster && kind create cluster && kubectl wait --for=condition=Ready nodes --all
$ helm install trivy-operator aquasecurity/trivy-operator --create-namespace --namespace trivy-system --values client-cache.yaml

I got errrors:

logs 
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kubernetes","namespace":"default"},"namespace":"default","name":"kubernetes","reconcileID":"5601f5f3-adbc-48a5-aa7e-eefbe1ac211c","error":"configauditreports.aquasecurity.github.io \"service-kubernetes\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"trivy-operator-77d84645bf","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator-77d84645bf","reconcileID":"156b48b0-6b49-412f-a796-33764fd1a3e6","error":"configauditreports.aquasecurity.github.io \"replicaset-trivy-operator-77d84645bf\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kube-dns","namespace":"kube-system"},"namespace":"kube-system","name":"kube-dns","reconcileID":"7e26adbe-2d23-498f-9ac5-735c6129889f","error":"configauditreports.aquasecurity.github.io \"service-kube-dns\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kindnet","namespace":"kube-system"},"namespace":"kube-system","name":"kindnet","reconcileID":"ae084f3b-ae54-4c72-a718-9bbcdbc01745","error":"configauditreports.aquasecurity.github.io \"daemonset-kindnet\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"trivy-operator","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator","reconcileID":"c2c2c89c-a170-4715-ac1e-05984f28d6e7","error":"configauditreports.aquasecurity.github.io \"service-trivy-operator\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"local-path-provisioner-7b8c8ddbd6","namespace":"local-path-storage"},"namespace":"local-path-storage","name":"local-path-provisioner-7b8c8ddbd6","reconcileID":"81bd4961-e46a-4682-8796-75c29a1b2c62","error":"configauditreports.aquasecurity.github.io \"replicaset-local-path-provisioner-7b8c8ddbd6\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kubernetes","namespace":"default"},"namespace":"default","name":"kubernetes","reconcileID":"469d715b-1372-417d-9cac-48fded9a1793","error":"configauditreports.aquasecurity.github.io \"service-kubernetes\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kube-proxy","namespace":"kube-system"},"namespace":"kube-system","name":"kube-proxy","reconcileID":"32f19a1c-dbe4-4be6-9bd7-3a39e12ed08e","error":"configauditreports.aquasecurity.github.io \"daemonset-kube-proxy\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kube-dns","namespace":"kube-system"},"namespace":"kube-system","name":"kube-dns","reconcileID":"53bf4106-ba99-4ca2-95f2-f3cc9ccfae68","error":"configauditreports.aquasecurity.github.io \"service-kube-dns\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"trivy-operator-77d84645bf","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator-77d84645bf","reconcileID":"f647d496-67a2-4113-a910-7b130775c453","error":"configauditreports.aquasecurity.github.io \"replicaset-trivy-operator-77d84645bf\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"trivy-operator","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator","reconcileID":"a31f8bb8-9829-433c-8fe1-10428f8ed5cc","error":"configauditreports.aquasecurity.github.io \"service-trivy-operator\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kindnet","namespace":"kube-system"},"namespace":"kube-system","name":"kindnet","reconcileID":"ba811888-703d-4594-aa19-7a3c2dec05de","error":"configauditreports.aquasecurity.github.io \"daemonset-kindnet\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kubernetes","namespace":"default"},"namespace":"default","name":"kubernetes","reconcileID":"1ec9ae6f-a47f-459d-a680-27a3097d9477","error":"configauditreports.aquasecurity.github.io \"service-kubernetes\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"local-path-provisioner-7b8c8ddbd6","namespace":"local-path-storage"},"namespace":"local-path-storage","name":"local-path-provisioner-7b8c8ddbd6","reconcileID":"9359b5f0-a7d0-4ca6-a284-a7d2d0804610","error":"configauditreports.aquasecurity.github.io \"replicaset-local-path-provisioner-7b8c8ddbd6\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kube-dns","namespace":"kube-system"},"namespace":"kube-system","name":"kube-dns","reconcileID":"1a00e6fd-7777-4033-bce7-6b74a627ef2e","error":"configauditreports.aquasecurity.github.io \"service-kube-dns\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kube-proxy","namespace":"kube-system"},"namespace":"kube-system","name":"kube-proxy","reconcileID":"c4aea148-aeb0-42e9-a47e-777d4534340b","error":"configauditreports.aquasecurity.github.io \"daemonset-kube-proxy\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-apiserver-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-apiserver-kind-control-plane","reconcileID":"45d15d1f-abe0-4109-a86f-da44ffe9cbd3","error":"configauditreports.aquasecurity.github.io \"pod-kube-apiserver-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"trivy-operator","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator","reconcileID":"2c0dbd24-13cc-4000-8a04-5f0c4a18eb67","error":"configauditreports.aquasecurity.github.io \"service-trivy-operator\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"trivy-operator-77d84645bf","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator-77d84645bf","reconcileID":"f378ab59-16a9-4022-b9df-1699ae602236","error":"configauditreports.aquasecurity.github.io \"replicaset-trivy-operator-77d84645bf\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kubernetes","namespace":"default"},"namespace":"default","name":"kubernetes","reconcileID":"ad4aefb0-3f78-4291-8214-5160b1ed538f","error":"configauditreports.aquasecurity.github.io \"service-kubernetes\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kindnet","namespace":"kube-system"},"namespace":"kube-system","name":"kindnet","reconcileID":"d2006433-34cb-4839-b0a6-0f9449806e5b","error":"configauditreports.aquasecurity.github.io \"daemonset-kindnet\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kube-dns","namespace":"kube-system"},"namespace":"kube-system","name":"kube-dns","reconcileID":"680a2af3-b1ad-4f64-bad5-e1a2a66b5b14","error":"configauditreports.aquasecurity.github.io \"service-kube-dns\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"etcd-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"etcd-kind-control-plane","reconcileID":"53107e02-a621-4998-a559-71345ce09f40","error":"configauditreports.aquasecurity.github.io \"pod-etcd-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"local-path-provisioner-7b8c8ddbd6","namespace":"local-path-storage"},"namespace":"local-path-storage","name":"local-path-provisioner-7b8c8ddbd6","reconcileID":"d001e494-2546-4363-97f3-6c6dfda5c92d","error":"configauditreports.aquasecurity.github.io \"replicaset-local-path-provisioner-7b8c8ddbd6\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kube-proxy","namespace":"kube-system"},"namespace":"kube-system","name":"kube-proxy","reconcileID":"015577e1-5fda-4b29-a386-bdb13d41b3db","error":"configauditreports.aquasecurity.github.io \"daemonset-kube-proxy\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"trivy-operator","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator","reconcileID":"4f531f05-dfb7-4734-a555-719112d4de5e","error":"configauditreports.aquasecurity.github.io \"service-trivy-operator\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:bootstrap-signer","namespace":"kube-public"},"namespace":"kube-public","name":"system:controller:bootstrap-signer","reconcileID":"5a1c1e5e-4543-4026-b730-cf9b97906b43","error":"rbacassessmentreports.aquasecurity.github.io \"role-b99d4b8d7\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-controller-manager-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-controller-manager-kind-control-plane","reconcileID":"9db4ef3b-ee82-416e-ace0-9a2182a7d410","error":"configauditreports.aquasecurity.github.io \"pod-kube-controller-manager-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"trivy-operator-77d84645bf","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator-77d84645bf","reconcileID":"fb5e6be7-ce38-4933-ba56-603efa7dd35a","error":"configauditreports.aquasecurity.github.io \"replicaset-trivy-operator-77d84645bf\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"extension-apiserver-authentication-reader","namespace":"kube-system"},"namespace":"kube-system","name":"extension-apiserver-authentication-reader","reconcileID":"c0fd4921-2d93-456d-b614-dd6af4aca4b1","error":"rbacassessmentreports.aquasecurity.github.io \"role-extension-apiserver-authentication-reader\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kindnet","namespace":"kube-system"},"namespace":"kube-system","name":"kindnet","reconcileID":"0069989e-5045-4a9e-ba89-fde6540f150c","error":"configauditreports.aquasecurity.github.io \"daemonset-kindnet\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kube-proxy","namespace":"kube-system"},"namespace":"kube-system","name":"kube-proxy","reconcileID":"8629dbf7-717e-4d54-aa9b-245b92632043","error":"rbacassessmentreports.aquasecurity.github.io \"role-kube-proxy\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kubernetes","namespace":"default"},"namespace":"default","name":"kubernetes","reconcileID":"488bd777-921d-44a6-8741-432994cf89e5","error":"configauditreports.aquasecurity.github.io \"service-kubernetes\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-scheduler-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-scheduler-kind-control-plane","reconcileID":"ecc73996-8184-46fa-9115-e265367bb944","error":"configauditreports.aquasecurity.github.io \"pod-kube-scheduler-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"local-path-provisioner-7b8c8ddbd6","namespace":"local-path-storage"},"namespace":"local-path-storage","name":"local-path-provisioner-7b8c8ddbd6","reconcileID":"844e69c7-8983-4947-b833-ce43f558ba09","error":"configauditreports.aquasecurity.github.io \"replicaset-local-path-provisioner-7b8c8ddbd6\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kubeadm:nodes-kubeadm-config","namespace":"kube-system"},"namespace":"kube-system","name":"kubeadm:nodes-kubeadm-config","reconcileID":"07908ccd-1c31-499c-aeaf-19d19e36c2fc","error":"rbacassessmentreports.aquasecurity.github.io \"role-5ddf59494b\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kube-dns","namespace":"kube-system"},"namespace":"kube-system","name":"kube-dns","reconcileID":"496d3ddf-7163-4dbd-90a4-ae288fc24665","error":"configauditreports.aquasecurity.github.io \"service-kube-dns\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kube-proxy","namespace":"kube-system"},"namespace":"kube-system","name":"kube-proxy","reconcileID":"35b89e5b-d4de-4f9e-b717-afc2048de004","error":"configauditreports.aquasecurity.github.io \"daemonset-kube-proxy\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system::leader-locking-kube-controller-manager","namespace":"kube-system"},"namespace":"kube-system","name":"system::leader-locking-kube-controller-manager","reconcileID":"dbd53a70-f399-46ee-88cb-591bece46c3f","error":"rbacassessmentreports.aquasecurity.github.io \"role-6fbccbcb9d\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"trivy-operator","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator","reconcileID":"beedaee6-c6e6-4f48-aead-0a9c7dd947fc","error":"configauditreports.aquasecurity.github.io \"service-trivy-operator\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-apiserver-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-apiserver-kind-control-plane","reconcileID":"89ffe9f8-c204-451c-978a-ffa7a1720cf8","error":"configauditreports.aquasecurity.github.io \"pod-kube-apiserver-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system::leader-locking-kube-scheduler","namespace":"kube-system"},"namespace":"kube-system","name":"system::leader-locking-kube-scheduler","reconcileID":"10e9b9d7-f33d-485b-a53a-5bef3d5dd835","error":"rbacassessmentreports.aquasecurity.github.io \"role-77cd64c645\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:token-cleaner","namespace":"kube-system"},"namespace":"kube-system","name":"system:controller:token-cleaner","reconcileID":"0512c9fa-38e1-44be-855f-e4e6bfb52ba4","error":"rbacassessmentreports.aquasecurity.github.io \"role-868458b9d6\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"local-path-provisioner-role","namespace":"local-path-storage"},"namespace":"local-path-storage","name":"local-path-provisioner-role","reconcileID":"414547c4-ab54-4931-94f2-1ffd0e71fa8f","error":"rbacassessmentreports.aquasecurity.github.io \"role-local-path-provisioner-role\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"etcd-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"etcd-kind-control-plane","reconcileID":"3e1b255b-d024-4f0f-9015-7fd8c1fc686e","error":"configauditreports.aquasecurity.github.io \"pod-etcd-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"trivy-operator-77d84645bf","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator-77d84645bf","reconcileID":"f53c1b17-fc2c-4f5f-b5dc-8ba56fd9ec0e","error":"configauditreports.aquasecurity.github.io \"replicaset-trivy-operator-77d84645bf\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kubeadm:bootstrap-signer-clusterinfo","namespace":"kube-public"},"namespace":"kube-public","name":"kubeadm:bootstrap-signer-clusterinfo","reconcileID":"475c7f47-3ec4-4cb2-a51c-a13454e2205f","error":"rbacassessmentreports.aquasecurity.github.io \"role-554cf6fccd\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kindnet","namespace":"kube-system"},"namespace":"kube-system","name":"kindnet","reconcileID":"943b0f29-becb-4a30-be30-10ff51ea95e0","error":"configauditreports.aquasecurity.github.io \"daemonset-kindnet\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kubeadm:kubelet-config","namespace":"kube-system"},"namespace":"kube-system","name":"kubeadm:kubelet-config","reconcileID":"6277d3d3-7fac-45aa-9ce4-7811436c486d","error":"rbacassessmentreports.aquasecurity.github.io \"role-86cd8b4dd9\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:16Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-controller-manager-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-controller-manager-kind-control-plane","reconcileID":"9d8f6c40-818d-439b-9236-2ec90684b87b","error":"configauditreports.aquasecurity.github.io \"pod-kube-controller-manager-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"local-path-provisioner-7b8c8ddbd6","namespace":"local-path-storage"},"namespace":"local-path-storage","name":"local-path-provisioner-7b8c8ddbd6","reconcileID":"3a2bcab5-b069-4d30-b87d-b8d944b2f7e7","error":"configauditreports.aquasecurity.github.io \"replicaset-local-path-provisioner-7b8c8ddbd6\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:bootstrap-signer","namespace":"kube-system"},"namespace":"kube-system","name":"system:controller:bootstrap-signer","reconcileID":"80ca5c76-9587-40dc-b210-75947bb5ce46","error":"rbacassessmentreports.aquasecurity.github.io \"role-b99d4b8d7\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kube-proxy","namespace":"kube-system"},"namespace":"kube-system","name":"kube-proxy","reconcileID":"735ef628-a887-4c17-a1a4-58f4d82570fe","error":"configauditreports.aquasecurity.github.io \"daemonset-kube-proxy\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:cloud-provider","namespace":"kube-system"},"namespace":"kube-system","name":"system:controller:cloud-provider","reconcileID":"02a7dbf1-d9c5-45ac-a553-9c1ee39ca072","error":"rbacassessmentreports.aquasecurity.github.io \"role-79f88497\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-scheduler-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-scheduler-kind-control-plane","reconcileID":"a6d92a49-2faf-426b-b6b3-28c7a64ae40f","error":"configauditreports.aquasecurity.github.io \"pod-kube-scheduler-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"trivy-operator","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator","reconcileID":"0fabf6fe-420c-4cf0-afbd-4f09bd264fe1","error":"rbacassessmentreports.aquasecurity.github.io \"role-trivy-operator\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"trivy-operator-leader-election","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator-leader-election","reconcileID":"713b97df-e2dd-49b7-a6f8-38925c52c047","error":"rbacassessmentreports.aquasecurity.github.io \"role-trivy-operator-leader-election\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kubernetes","namespace":"default"},"namespace":"default","name":"kubernetes","reconcileID":"c8b546dc-2597-4389-a30d-a0eb4e2b149c","error":"configauditreports.aquasecurity.github.io \"service-kubernetes\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:bootstrap-signer","namespace":"kube-public"},"namespace":"kube-public","name":"system:controller:bootstrap-signer","reconcileID":"bb8cd1a0-885c-4503-a9c1-565fb3e06115","error":"rbacassessmentreports.aquasecurity.github.io \"role-b99d4b8d7\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-apiserver-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-apiserver-kind-control-plane","reconcileID":"d574a18a-ceaf-46ff-bc20-1b977fbd9b82","error":"configauditreports.aquasecurity.github.io \"pod-kube-apiserver-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"extension-apiserver-authentication-reader","namespace":"kube-system"},"namespace":"kube-system","name":"extension-apiserver-authentication-reader","reconcileID":"36c682bc-b0c9-4a49-baba-ecf6d5ce3cbd","error":"rbacassessmentreports.aquasecurity.github.io \"role-extension-apiserver-authentication-reader\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kube-dns","namespace":"kube-system"},"namespace":"kube-system","name":"kube-dns","reconcileID":"948e0790-6edb-42c1-9079-5f2e44852560","error":"configauditreports.aquasecurity.github.io \"service-kube-dns\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kube-proxy","namespace":"kube-system"},"namespace":"kube-system","name":"kube-proxy","reconcileID":"fd86cd10-0b68-4a48-9ee4-60c079e7f482","error":"rbacassessmentreports.aquasecurity.github.io \"role-kube-proxy\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"trivy-operator","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator","reconcileID":"0a402d8e-337e-4a49-9e09-19d4301de57f","error":"configauditreports.aquasecurity.github.io \"service-trivy-operator\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kubeadm:nodes-kubeadm-config","namespace":"kube-system"},"namespace":"kube-system","name":"kubeadm:nodes-kubeadm-config","reconcileID":"2cc28330-3a40-479b-8147-8112107d8879","error":"rbacassessmentreports.aquasecurity.github.io \"role-5ddf59494b\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"etcd-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"etcd-kind-control-plane","reconcileID":"749b5db5-75e6-4cac-baf4-2cd8d022fe4c","error":"configauditreports.aquasecurity.github.io \"pod-etcd-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system::leader-locking-kube-controller-manager","namespace":"kube-system"},"namespace":"kube-system","name":"system::leader-locking-kube-controller-manager","reconcileID":"90c29b21-5806-43e1-a685-0f2c9888af4f","error":"rbacassessmentreports.aquasecurity.github.io \"role-6fbccbcb9d\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system::leader-locking-kube-scheduler","namespace":"kube-system"},"namespace":"kube-system","name":"system::leader-locking-kube-scheduler","reconcileID":"7b9ed0ee-1d02-4beb-bf46-c70b2b5e8d6b","error":"rbacassessmentreports.aquasecurity.github.io \"role-77cd64c645\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-controller-manager-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-controller-manager-kind-control-plane","reconcileID":"b5f68281-d3f6-42b2-a1b1-2a3cc71fb1e7","error":"configauditreports.aquasecurity.github.io \"pod-kube-controller-manager-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:token-cleaner","namespace":"kube-system"},"namespace":"kube-system","name":"system:controller:token-cleaner","reconcileID":"68d1eb55-3471-4c10-a1a8-43a225e6147d","error":"rbacassessmentreports.aquasecurity.github.io \"role-868458b9d6\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"trivy-operator-77d84645bf","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator-77d84645bf","reconcileID":"1ec938a9-b00c-48d3-b6e8-ef028e927285","error":"configauditreports.aquasecurity.github.io \"replicaset-trivy-operator-77d84645bf\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"local-path-provisioner-role","namespace":"local-path-storage"},"namespace":"local-path-storage","name":"local-path-provisioner-role","reconcileID":"b3b1f74b-4bdc-4409-a9d4-27514195cf71","error":"rbacassessmentreports.aquasecurity.github.io \"role-local-path-provisioner-role\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kubeadm:bootstrap-signer-clusterinfo","namespace":"kube-public"},"namespace":"kube-public","name":"kubeadm:bootstrap-signer-clusterinfo","reconcileID":"5ff36217-18ef-4472-b406-0b3e84cbad75","error":"rbacassessmentreports.aquasecurity.github.io \"role-554cf6fccd\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kindnet","namespace":"kube-system"},"namespace":"kube-system","name":"kindnet","reconcileID":"b14ad61d-e08d-4f83-9260-11945b969d4d","error":"configauditreports.aquasecurity.github.io \"daemonset-kindnet\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-scheduler-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-scheduler-kind-control-plane","reconcileID":"c732fc7a-7b63-4cb5-ac73-4b7ada5fdb26","error":"configauditreports.aquasecurity.github.io \"pod-kube-scheduler-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"replicaset","controllerGroup":"apps","controllerKind":"ReplicaSet","ReplicaSet":{"name":"local-path-provisioner-7b8c8ddbd6","namespace":"local-path-storage"},"namespace":"local-path-storage","name":"local-path-provisioner-7b8c8ddbd6","reconcileID":"e4565cf5-7ccc-4978-83cb-5157946e10f0","error":"configauditreports.aquasecurity.github.io \"replicaset-local-path-provisioner-7b8c8ddbd6\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kubeadm:kubelet-config","namespace":"kube-system"},"namespace":"kube-system","name":"kubeadm:kubelet-config","reconcileID":"65fd5791-eda2-4067-badd-f5b093aa17c3","error":"rbacassessmentreports.aquasecurity.github.io \"role-86cd8b4dd9\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"daemonset","controllerGroup":"apps","controllerKind":"DaemonSet","DaemonSet":{"name":"kube-proxy","namespace":"kube-system"},"namespace":"kube-system","name":"kube-proxy","reconcileID":"f0caad0e-13ba-4799-a9ce-75a72ec2b421","error":"configauditreports.aquasecurity.github.io \"daemonset-kube-proxy\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:bootstrap-signer","namespace":"kube-system"},"namespace":"kube-system","name":"system:controller:bootstrap-signer","reconcileID":"c507a34f-c30f-4155-9574-ace24110ca2a","error":"rbacassessmentreports.aquasecurity.github.io \"role-b99d4b8d7\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:cloud-provider","namespace":"kube-system"},"namespace":"kube-system","name":"system:controller:cloud-provider","reconcileID":"1b9f3d50-2a37-4c76-8b2e-49dbad85455c","error":"rbacassessmentreports.aquasecurity.github.io \"role-79f88497\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-apiserver-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-apiserver-kind-control-plane","reconcileID":"183f4035-22c8-4d69-8b52-f6334e20ef76","error":"configauditreports.aquasecurity.github.io \"pod-kube-apiserver-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"trivy-operator","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator","reconcileID":"67f6d8fc-8763-4769-b855-d70d70798a51","error":"rbacassessmentreports.aquasecurity.github.io \"role-trivy-operator\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"trivy-operator-leader-election","namespace":"trivy-system"},"namespace":"trivy-system","name":"trivy-operator-leader-election","reconcileID":"d6dfc04c-f7cf-4f73-ae2e-d684aaeeb6ad","error":"rbacassessmentreports.aquasecurity.github.io \"role-trivy-operator-leader-election\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"etcd-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"etcd-kind-control-plane","reconcileID":"b563cdb0-dc1c-463f-9e05-1911630fc7e0","error":"configauditreports.aquasecurity.github.io \"pod-etcd-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:bootstrap-signer","namespace":"kube-public"},"namespace":"kube-public","name":"system:controller:bootstrap-signer","reconcileID":"622cf5f9-5f0c-4d3b-bb9b-a6a81b5d676d","error":"rbacassessmentreports.aquasecurity.github.io \"role-b99d4b8d7\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"extension-apiserver-authentication-reader","namespace":"kube-system"},"namespace":"kube-system","name":"extension-apiserver-authentication-reader","reconcileID":"dacbde26-1a49-4b2e-8afc-eb05a09040b6","error":"rbacassessmentreports.aquasecurity.github.io \"role-extension-apiserver-authentication-reader\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kube-proxy","namespace":"kube-system"},"namespace":"kube-system","name":"kube-proxy","reconcileID":"e2421816-1353-4df2-978b-44d3354f802b","error":"rbacassessmentreports.aquasecurity.github.io \"role-kube-proxy\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-controller-manager-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-controller-manager-kind-control-plane","reconcileID":"cecf5e9f-a590-479e-af06-c3604263a7e5","error":"configauditreports.aquasecurity.github.io \"pod-kube-controller-manager-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kubeadm:nodes-kubeadm-config","namespace":"kube-system"},"namespace":"kube-system","name":"kubeadm:nodes-kubeadm-config","reconcileID":"99219d7a-fedb-4e4e-a8b7-8ea77284f15a","error":"rbacassessmentreports.aquasecurity.github.io \"role-5ddf59494b\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system::leader-locking-kube-controller-manager","namespace":"kube-system"},"namespace":"kube-system","name":"system::leader-locking-kube-controller-manager","reconcileID":"ced7dca8-c048-44fb-ad01-61fb2ae6bda3","error":"rbacassessmentreports.aquasecurity.github.io \"role-6fbccbcb9d\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-scheduler-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-scheduler-kind-control-plane","reconcileID":"8ba239c1-b961-4c51-8ab7-40f28ca37d50","error":"configauditreports.aquasecurity.github.io \"pod-kube-scheduler-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system::leader-locking-kube-scheduler","namespace":"kube-system"},"namespace":"kube-system","name":"system::leader-locking-kube-scheduler","reconcileID":"553f9d23-4369-469f-bd41-d2e2af2c4f98","error":"rbacassessmentreports.aquasecurity.github.io \"role-77cd64c645\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:token-cleaner","namespace":"kube-system"},"namespace":"kube-system","name":"system:controller:token-cleaner","reconcileID":"ed8627e0-09b8-4bc6-b095-97f9a4d40b97","error":"rbacassessmentreports.aquasecurity.github.io \"role-868458b9d6\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"local-path-provisioner-role","namespace":"local-path-storage"},"namespace":"local-path-storage","name":"local-path-provisioner-role","reconcileID":"f1124991-aced-4bee-8005-9cfc484d74d0","error":"rbacassessmentreports.aquasecurity.github.io \"role-local-path-provisioner-role\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"kube-apiserver-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"kube-apiserver-kind-control-plane","reconcileID":"4c5fd8a0-214e-4c17-b491-0181a46b5bfa","error":"configauditreports.aquasecurity.github.io \"pod-kube-apiserver-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kubeadm:bootstrap-signer-clusterinfo","namespace":"kube-public"},"namespace":"kube-public","name":"kubeadm:bootstrap-signer-clusterinfo","reconcileID":"c7e1a800-fda0-46a6-af3b-e8884ac9703c","error":"rbacassessmentreports.aquasecurity.github.io \"role-554cf6fccd\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"service","controllerGroup":"","controllerKind":"Service","Service":{"name":"kubernetes","namespace":"default"},"namespace":"default","name":"kubernetes","reconcileID":"ee1ccac1-b27e-4f28-a2c7-cb1d1f93b5cc","error":"configauditreports.aquasecurity.github.io \"service-kubernetes\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"kubeadm:kubelet-config","namespace":"kube-system"},"namespace":"kube-system","name":"kubeadm:kubelet-config","reconcileID":"141785d5-48ff-4967-bf21-d4fd6514fbf4","error":"rbacassessmentreports.aquasecurity.github.io \"role-86cd8b4dd9\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"role","controllerGroup":"rbac.authorization.k8s.io","controllerKind":"Role","Role":{"name":"system:controller:bootstrap-signer","namespace":"kube-system"},"namespace":"kube-system","name":"system:controller:bootstrap-signer","reconcileID":"265b2532-007c-46f5-aa83-3639fdab9df6","error":"rbacassessmentreports.aquasecurity.github.io \"role-b99d4b8d7\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}
{"level":"error","ts":"2025-09-02T17:06:17Z","msg":"Reconciler error","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"etcd-kind-control-plane","namespace":"kube-system"},"namespace":"kube-system","name":"etcd-kind-control-plane","reconcileID":"7a048a12-994c-40d9-8acd-0cd4509da235","error":"configauditreports.aquasecurity.github.io \"pod-etcd-kind-control-plane\" is invalid: metadata.resourceVersion: Invalid value: 0: must be specified for an update","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:353\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:300\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.1\n\t/Users/amf/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202"}

the values is here https://github.com/afdesk/to-values/blob/main/client-cache.yaml

@simar7
Copy link
Member Author

simar7 commented Sep 4, 2025

@simar7 I left small comments, but it doesn't matter and up to you. actually I can't run Trivy-operator with this change:

$ kind delete cluster && kind create cluster && kubectl wait --for=condition=Ready nodes --all
$ helm install trivy-operator aquasecurity/trivy-operator --create-namespace --namespace trivy-system --values client-cache.yaml

I got errrors:

logs
the values is here https://github.com/afdesk/to-values/blob/main/client-cache.yaml

You are right @afdesk - I fixed it here 0f60b93 it seems keeping ResourceVersion() is critical in k8s.

@simar7 simar7 requested a review from afdesk September 4, 2025 03:51
@simar7 simar7 force-pushed the optimize/kubernetes-client-cache branch from eafc133 to 099de58 Compare September 6, 2025 04:04
@simar7 simar7 force-pushed the optimize/kubernetes-client-cache branch from 099de58 to 00c88c3 Compare September 6, 2025 04:24
afdesk
afdesk approved these changes Sep 8, 2025
View reviewed changes
Copy link
Contributor

@afdesk afdesk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

It works correctly now, I've tested it with the next values: https://github.com/afdesk/to-values/blob/main/client-cache.yaml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

Copilot code review Copilot Copilot left review comments

@afdesk afdesk afdesk approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@simar7 @afdesk