https://pastein.ru/t/ErS
Загрузка данных
Running with gitlab-runner 15.8.0 (12335144)
on gitlab-runner-gitlab-runner-6f4d49d99-h585b 8W3Nm2Mz, system ID: r_DYVWgNUEigZr
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.18 ...
Using attach strategy to execute scripts...
Preparing environment
00:05
Waiting for pod gitlab-runners/runner-8w3nm2mz-project-1536-concurrent-0vll7k to be running, status is Pending
Waiting for pod gitlab-runners/runner-8w3nm2mz-project-1536-concurrent-0vll7k to be running, status is Pending
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-8w3nm2mz-project-1536-concurrent-0vll7k via gitlab-runner-gitlab-runner-6f4d49d99-h585b...
Getting source from Git repository
00:02
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 50...
Initialized empty Git repository in /builds/rshbintech/abs/banking-accounting/screeningps/casemgmt/.git/
Created fresh repository.
Checking out d9414d9d as master...
Skipping Git submodules setup
Downloading artifacts
00:02
Downloading artifacts for devsecops_antivirus_scan (25281737)...
Downloading artifacts from coordinator... ok id=25281737 responseStatus=200 OK token=64_JxRQd
Downloading artifacts for dockerfilegen (25281741)...
Downloading artifacts from coordinator... ok id=25281741 responseStatus=200 OK token=64_JxRQd
Executing "step_script" stage of the job script
20:17
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: devstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=devstbl
++ CLUSTER=devstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ dev = production ]]
++ export NAMESPACE=isys-screeningps-dev
++ NAMESPACE=isys-screeningps-dev
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context devstbl -n isys-screeningps-dev history casemgmt
+++ tail -1
+++ cut -f1,3
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ failed =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"
++ helmfile --environment devstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/abs/banking-accounting/screeningps/casemgmt/-/pipelines/3631721 --set additionalWorkloadAnnotations.gitlabCommit=d9414d9d3d7cf865108dff1f90a662c4aae416d4
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/abs/banking-accounting/screeningps/casemgmt
no matches for path: envs/dev/devstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=vault-secrets-casemgmt, chart=rshb-charts/raw
Comparing release=psvc-casemgmt, chart=rshb-charts/raw
isys-screeningps-dev, casemgmt, PlatformService (production.platform.ckpr.integrations.rshbintech.ru) has changed:
# Source: raw/templates/resources.yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: PlatformService
metadata:
annotations:
ci.build.image.app.farm/version: 3.9.12-eclipse-temurin-21-rshb.0.2.1
ci.runtime.image.app.farm/version: 21.0.9_10-jre-jammy-rshb.1.0.0
labels:
app: raw
chart: raw-0.2.3-rshb.1.0.0
ci.build.image.app.farm/name: maven
ci.kubeclientapps.app.farm/version: 8.21.18
ci.runtime.image.app.farm/name: jre
ci.service.app.farm/lang: java
ci.service.app.farm/side: backend
- commitShortSHA: 82499f50
+ commitShortSHA: d9414d9d
heritage: Helm
release: psvc-casemgmt
version: master
name: casemgmt
spec:
cpuLimits: 4000m
cpuRequests: "1"
description: 'Скрининг ПС: casemgmt'
environment: DEV
informationSystemId: screeningps-dev
name: 'Скрининг ПС: casemgmt'
projectPath: /rshbintech/abs/banking-accounting/screeningps/casemgmt
publicDomain: casemgmt
ramLimits: 4096Mi
ramRequests: 4096Mi
replicaCount: 1
serviceReference:
name: casemgmt
namespace: isys-screeningps-dev
side: backend
updateStrategy: Recreate
Comparing release=platform-database-casemgmt, chart=rshb-charts/raw
Comparing release=links-casemgmt, chart=rshb-charts/raw
Comparing release=casemgmt, chart=rshb-charts/base
isys-screeningps-dev, casemgmt, Deployment (apps) has changed:
# Source: base/templates/workload.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: casemgmt
labels:
app: casemgmt
fullname: casemgmt
chart: base-1.15.3
release: casemgmt
heritage: Helm
isys: "screeningps-dev"
psvc: "casemgmt"
version: "master"
workload.topology.app.farm/zone: "rumsk1"
annotations:
- gitlabCommit: 82499f50c5621bddad50944587fbc653f1f5027e
- gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/abs/banking-accounting/screeningps/casemgmt/-/pipelines/3608927
- platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 82499f50
- platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3608927"
+ gitlabCommit: d9414d9d3d7cf865108dff1f90a662c4aae416d4
+ gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/abs/banking-accounting/screeningps/casemgmt/-/pipelines/3631721
+ platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: d9414d9d
+ platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3631721"
spec:
strategy:
type: Recreate
replicas: 1
selector:
matchLabels:
app: casemgmt
fullname: casemgmt
release: casemgmt
template:
metadata:
labels:
app: casemgmt
fullname: casemgmt
chart: base-1.15.3
release: casemgmt
heritage: Helm
isys: "screeningps-dev"
psvc: "casemgmt"
version: "master"
workload.topology.app.farm/zone: "rumsk1"
annotations:
checksum/configMapsEnv: "bd07b8a1c92972d19ba818a8321126a296dba4fc220d9c7dacbf944571f85e63"
checksum/secretEnv: "2c054ab9ea52f1ef7155091803dce64d932cbf671264802c9f41b76ff0cf7caa"
- ci/commithash: "82499f50"
+ ci/commithash: "d9414d9d"
inject.istio.io/templates: "sidecar,custom"
prometheus.io/path: "/metrics"
prometheus.io/port: "8080"
prometheus.io/scrape: "true"
sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"screeningps-dev-envoy-filters\"}}]"
sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
spec:
automountServiceAccountToken: false
serviceAccountName: default
nodeSelector:
workload.topology.app.farm/zone: rumsk1
priorityClassName: rumsk1
containers:
- name: app
image: registry.rshbdev.ru/rshbintech/abs/banking-accounting/screeningps/casemgmt:master
imagePullPolicy: Always
envFrom:
- configMapRef:
name: casemgmt-app-cm-env
- secretRef:
name: casemgmt-app-secret-env
resources:
limits:
cpu: 4000m
memory: 4096Mi
requests:
cpu: 1
memory: 4096Mi
ports:
livenessProbe:
failureThreshold: 5
httpGet:
path: /health/liveness
port: 8080
initialDelaySeconds: 400
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
readinessProbe:
failureThreshold: 3
httpGet:
path: /health/readiness
port: 8080
initialDelaySeconds: 400
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
volumeMounts:
- name: app-vault-secrets
mountPath: /secrets
readOnly: true
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
procMount: Default
readOnlyRootFilesystem: false
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
securityContext:
fsGroup: 1001
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
tolerations:
- effect: NoSchedule
key: workload.topology.app.farm/zone
operator: Exists
hostNetwork: false
volumes:
- name: app-vault-secrets
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: casemgmt-app-secret-provider
Listing releases matching ^pjob-casemgmt$
Listing releases matching ^exsvc-casemgmt$
Listing releases matching ^data-casemgmt$
Listing releases matching ^assets-config-casemgmt$
Listing releases matching ^casemgmt-raw$
Listing releases matching ^casemgmt-grafana-dashboard$
Listing releases matching ^casemgmt-prometheus-rules$
Listing releases matching ^casemgmt-rumsk1$
Listing releases matching ^casemgmt-rumsk2$
Upgrading release=psvc-casemgmt, chart=rshb-charts/raw
Release "psvc-casemgmt" has been upgraded. Happy Helming!
NAME: psvc-casemgmt
LAST DEPLOYED: Wed Oct 7 13:14:09 2026
NAMESPACE: isys-screeningps-dev
STATUS: deployed
REVISION: 37
TEST SUITE: None
Listing releases matching ^psvc-casemgmt$
psvc-casemgmt isys-screeningps-dev 37 2026-10-07 13:14:09.517626237 +0000 UTC deployed raw-0.2.3-rshb.1.0.0 0.2.3
Upgrading release=casemgmt, chart=rshb-charts/base
UPDATED RELEASES:
NAME CHART VERSION
psvc-casemgmt rshb-charts/raw 0.2.3-rshb.1.0.0
FAILED RELEASES:
NAME
casemgmt
in deploy/helmfile.yaml: failed processing release casemgmt: command "/usr/local/link/helm" exited with non-zero status:
PATH:
/usr/local/link/helm
ARGS:
0: helm (4 bytes)
1: --kube-context (14 bytes)
2: devstbl (7 bytes)
3: upgrade (7 bytes)
4: --install (9 bytes)
5: --reset-values (14 bytes)
6: casemgmt (8 bytes)
7: rshb-charts/base (16 bytes)
8: --version (9 bytes)
9: 1.15.3 (6 bytes)
10: --wait (6 bytes)
11: --timeout (9 bytes)
12: 600s (4 bytes)
13: --atomic (8 bytes)
14: --kube-context (14 bytes)
15: devstbl (7 bytes)
16: --namespace (11 bytes)
17: isys-screeningps-dev (20 bytes)
18: --values (8 bytes)
19: /tmp/helmfile3133580413/isys-screeningps-dev-casemgmt-values-559d445f5d (71 bytes)
20: --values (8 bytes)
21: /tmp/helmfile2323728962/isys-screeningps-dev-casemgmt-values-5c4d45c8c5 (71 bytes)
22: --set (5 bytes)
23: additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/abs/banking-accounting/screeningps/casemgmt/-/pipelines/3631721 (145 bytes)
24: --set (5 bytes)
25: additionalWorkloadAnnotations.gitlabCommit=d9414d9d3d7cf865108dff1f90a662c4aae416d4 (83 bytes)
26: --history-max (13 bytes)
27: 10 (2 bytes)
ERROR:
exit status 1
EXIT STATUS
1
STDERR:
Error: UPGRADE FAILED: an error occurred while rolling back the release. original upgrade error: timed out waiting for the condition: release casemgmt failed: timed out waiting for the condition
COMBINED OUTPUT:
Error: UPGRADE FAILED: an error occurred while rolling back the release. original upgrade error: timed out waiting for the condition: release casemgmt failed: timed out waiting for the condition
Uploading artifacts for failed job
00:02
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories
Uploading artifacts as "dotenv" to coordinator... 201 Created id=25281752 responseStatus=201 Created token=64_JxRQd
Cleaning up project directory and file based variables
00:01
ERROR: Job failed: command terminated with exit code 1
dmitriev-aal@VDI-Dmitriev-A:~$ ktx devstbl
Switched to context "devstbl".
dmitriev-aal@VDI-Dmitriev-A:~$ kns isys-screeningps-dev
Set context namespace to "isys-screeningps-dev"
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl get pods | grep casemgmt
casemgmt-747545b658-xcfjc 0/2 Terminating 0 6d22h
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl get events | grep casemgmt
2m37s Warning FailedCreate replicaset/casemgmt-747545b658 Error creating: admission webhook "workloadquota-mutating.platform.ckpr.integrations.rshbintech.ru" denied the request: Ошибка при бронировании ресурсов квоты rumsk1 в namespace isys-screeningps-dev: превышена WorkloadQuota: limits.cpu: используется 22650m + запрашивается 4400m > предел 24; limits.memory: используется 25462Mi + запрашивается 4480Mi > предел 26Gi: превышены лимиты WorkloadQuota
34m Normal ScalingReplicaSet deployment/casemgmt Scaled down replica set casemgmt-747545b658 to 0
24m Normal ScalingReplicaSet deployment/casemgmt Scaled up replica set casemgmt-747545b658 to 1
dmitriev-aal@VDI-Dmitriev-A:~$
