https://pastein.ru/t/5zq
Загрузка данных
Running with gitlab-runner 15.8.0 (12335144)
on gitlab-runner-gitlab-runner-5c5d8dfd84-fc2jj x3T1Qxkg, system ID: r_0t1aE5p8nfLN
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.4 ...
Using attach strategy to execute scripts...
Preparing environment
00:14
Waiting for pod gitlab-runners/runner-x3t1qxkg-project-25788-concurrent-0gkd95 to be running, status is Pending
Waiting for pod gitlab-runners/runner-x3t1qxkg-project-25788-concurrent-0gkd95 to be running, status is Pending
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-x3t1qxkg-project-25788-concurrent-0gkd95 via gitlab-runner-gitlab-runner-5c5d8dfd84-fc2jj...
Getting source from Git repository
00:02
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/it-corp/middle-office/eye/isys/.git/
Created fresh repository.
Checking out 8499383c as master...
Skipping Git submodules setup
Executing "step_script" stage of the job script
00:07
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: devstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=devstbl
++ CLUSTER=devstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ dev = production ]]
++ export NAMESPACE=isys-eye-dev
++ NAMESPACE=isys-eye-dev
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ tail -1
+++ helm --kube-context devstbl -n isys-eye-dev history isys
+++ cut -f1,3
Error: release: not found
++ true
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ '' =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"
++ helmfile --environment devstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/it-corp/middle-office/eye/isys/-/pipelines/3171168 --set additionalWorkloadAnnotations.gitlabCommit=8499383c80392e9cbaeefe93a02c6b5c8285686a
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/it-corp/middle-office/eye/isys
no matches for path: envs/dev/devstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=isys-eye-dev, chart=rshb-charts/raw
platform, eye-dev, InternalSystem (production.platform.ckpr.integrations.rshbintech.ru) has changed:
# Source: raw/templates/resources.yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: InternalSystem
metadata:
labels:
app: raw
chart: raw-0.2.3-rshb.1.0.0
- ci.kubeclientapps.app.farm/version: 8.17.1
+ ci.kubeclientapps.app.farm/version: 8.21.4
+ commitShortSHA: 8499383c
heritage: Helm
release: isys-eye-dev
+ version: master
name: eye-dev
spec:
aliases:
- description: ККР ЮЛ 2.0.РСХБ ОКО ККР ЮЛ
registry: archrepo
systemCode: APP-6741
cpuLimits: "10"
cpuRequests: "8"
depart: rshbintech/it-corp/middle-office
description: Информационная система Универсальный верификатор
+ dynamicEnvironment:
+ defined:
+ - dyn-1
environment: DEV
name: ИС УВ
namespace: isys-eye-dev
owner: ЦК развития мидл-офисных систем
projectPath: /rshbintech/it-corp/middle-office/eye/isys
ramLimits: 10Gi
ramRequests: 8Gi
roles:
- code: role-app-admin
description: Администратор приложения
- code: role-app-sec-admin
description: Администратор ИБ
- code: role-sec-user
description: Работник СБ
- code: role-head-sec-user
description: Руководитель СБ ОКО
- code: role-credit-analyst-kkb
description: Кредитный аналитик ККБ
- code: role-client-manager-kkb
description: Клиентский менеджер ККБ
- code: role-credit-analyst-msb
description: Кредитный аналитик МСБ
- code: role-client-manager-msb
description: Клиентский менеджер МСБ
- code: role-qa
description: Прикладной администратор
- code: role-dev
description: Developer
- code: role-auditor-cba
description: Аудитор СВА
- code: role-head-kp
description: Руководитель КП/ПА ОКО
platform, eye-dyn-1, InternalSystem (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: InternalSystem
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.4
+ commitShortSHA: 8499383c
+ heritage: Helm
+ release: isys-eye-dev
+ version: master
+ name: eye-dyn-1
+ spec:
+ aliases:
+ - description: ККР ЮЛ 2.0.РСХБ ОКО ККР ЮЛ
+ registry: archrepo
+ systemCode: APP-6741
+ cpuLimits: "10"
+ cpuRequests: "8"
+ depart: rshbintech/it-corp/middle-office
+ description: Информационная система Универсальный верификатор
+ dynamicEnvironment:
+ code: dyn-1
+ services:
+ eye-frontend:
+ branch: feature/dynamic-one
+ verifier:
+ branch: feature/dynamic-one
+ environment: DEV
+ name: ИС УВ-разработка
+ namespace: isys-eye-dyn-1
+ owner: ЦК развития мидл-офисных систем
+ projectPath: /rshbintech/it-corp/middle-office/eye/isys
+ ramLimits: 10Gi
+ ramRequests: 8Gi
+ roles:
+ - code: role-app-admin
+ description: Администратор приложения
+ - code: role-app-sec-admin
+ description: Администратор ИБ
+ - code: role-sec-user
+ description: Работник СБ
+ - code: role-head-sec-user
+ description: Руководитель СБ ОКО
+ - code: role-credit-analyst-kkb
+ description: Кредитный аналитик ККБ
+ - code: role-client-manager-kkb
+ description: Клиентский менеджер ККБ
+ - code: role-credit-analyst-msb
+ description: Кредитный аналитик МСБ
+ - code: role-client-manager-msb
+ description: Клиентский менеджер МСБ
+ - code: role-qa
+ description: Прикладной администратор
+ - code: role-dev
+ description: Developer
+ - code: role-auditor-cba
+ description: Аудитор СВА
+ - code: role-head-kp
+ description: Руководитель КП/ПА ОКО
Listing releases matching ^isys-grafana-dashboard$
Listing releases matching ^kafka-clusters-isys-eye-dev$
Listing releases matching ^kafka-topics-isys-eye-dev$
Listing releases matching ^isys-eye-dev-approvals$
Upgrading release=isys-eye-dev, chart=rshb-charts/raw
FAILED RELEASES:
NAME
isys-eye-dev
in deploy/helmfile.yaml: failed processing release isys-eye-dev: command "/usr/local/link/helm" exited with non-zero status:
PATH:
/usr/local/link/helm
ARGS:
0: helm (4 bytes)
1: --kube-context (14 bytes)
2: devstbl (7 bytes)
3: upgrade (7 bytes)
4: --install (9 bytes)
5: --reset-values (14 bytes)
6: isys-eye-dev (12 bytes)
7: rshb-charts/raw (15 bytes)
8: --version (9 bytes)
9: 0.2.3-rshb.1.0.0 (16 bytes)
10: --wait (6 bytes)
11: --timeout (9 bytes)
12: 600s (4 bytes)
13: --atomic (8 bytes)
14: --kube-context (14 bytes)
15: devstbl (7 bytes)
16: --namespace (11 bytes)
17: platform (8 bytes)
18: --values (8 bytes)
19: /tmp/helmfile3371890887/platform-isys-eye-dev-values-6b88d6d548 (63 bytes)
20: --values (8 bytes)
21: /tmp/helmfile1207180234/platform-isys-eye-dev-values-5b7d5fd7 (61 bytes)
22: --set (5 bytes)
23: additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/it-corp/middle-office/eye/isys/-/pipelines/3171168 (132 bytes)
24: --set (5 bytes)
25: additionalWorkloadAnnotations.gitlabCommit=8499383c80392e9cbaeefe93a02c6b5c8285686a (83 bytes)
26: --history-max (13 bytes)
27: 10 (2 bytes)
ERROR:
exit status 1
EXIT STATUS
1
STDERR:
Error: UPGRADE FAILED: release isys-eye-dev failed, and has been rolled back due to atomic being set: failed to create resource: admission webhook "internalsystem.platform.ckpr.integrations.rshbintech.ru" denied the request: ошибка создания внутренней системы: создание новой внутренней системы eye-dyn-1 разрешено только в следующем списке групп gitlab: [/rshbgroup /appfarm /examples]. Ошибка создания ресурса: недопустимое расположение системы в gitlab
COMBINED OUTPUT:
Error: UPGRADE FAILED: release isys-eye-dev failed, and has been rolled back due to atomic being set: failed to create resource: admission webhook "internalsystem.platform.ckpr.integrations.rshbintech.ru" denied the request: ошибка создания внутренней системы: создание новой внутренней системы eye-dyn-1 разрешено только в следующем списке групп gitlab: [/rshbgroup /appfarm /examples]. Ошибка создания ресурса: недопустимое расположение системы в gitlab
Uploading artifacts for failed job
00:01
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories
Uploading artifacts as "dotenv" to coordinator... 201 Created id=22097531 responseStatus=201 Created token=64_43YQS
Cleaning up project directory and file based variables
00:01
ERROR: Job failed: command terminated with exit code 1