https://pastein.ru/t/YOq
Загрузка данных
Running with gitlab-runner 15.8.0 (12335144)
on gitlab-runner-gitlab-runner-5c5d8dfd84-fc2jj x3T1Qxkg, system ID: r_0t1aE5p8nfLN
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.4 ...
Using attach strategy to execute scripts...
Preparing environment
00:09
Waiting for pod gitlab-runners/runner-x3t1qxkg-project-56309-concurrent-0v4js7 to be running, status is Pending
Waiting for pod gitlab-runners/runner-x3t1qxkg-project-56309-concurrent-0v4js7 to be running, status is Pending
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-x3t1qxkg-project-56309-concurrent-0v4js7 via gitlab-runner-gitlab-runner-5c5d8dfd84-fc2jj...
Getting source from Git repository
00:02
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/abs/banking-accounting/amkkr/loader-src/.git/
Created fresh repository.
Checking out 83e51878 as master...
Skipping Git submodules setup
Downloading artifacts
00:02
Downloading artifacts for devsecops_antivirus_scan (21948637)...
Downloading artifacts from coordinator... ok id=21948637 responseStatus=200 OK token=64_-ZmqX
Downloading artifacts for dockerfilegen (21948641)...
Downloading artifacts from coordinator... ok id=21948641 responseStatus=200 OK token=64_-ZmqX
Downloading artifacts for build (21948645)...
Downloading artifacts from coordinator... ok id=21948645 responseStatus=200 OK token=64_-ZmqX
Executing "step_script" stage of the job script
03:58
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: devstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=devstbl
++ CLUSTER=devstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ dev = production ]]
++ export NAMESPACE=isys-amkkr-dev
++ NAMESPACE=isys-amkkr-dev
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context devstbl -n isys-amkkr-dev history loader-src
+++ tail -1
+++ cut -f1,3
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ deployed =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets
++ helmfile --environment devstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/abs/banking-accounting/amkkr/loader-src
no matches for path: envs/dev/devstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=vault-secrets-loader-src, chart=rshb-charts/raw
isys-amkkr-dev, vault-secrets-loader-src, Secret (v1) has changed:
+ Changes suppressed on sensitive content of type Secret
Comparing release=psvc-loader-src, chart=rshb-charts/raw
isys-amkkr-dev, loader-src, PlatformService (production.platform.ckpr.integrations.rshbintech.ru) has changed:
# Source: raw/templates/resources.yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: PlatformService
metadata:
labels:
app: raw
chart: raw-0.2.3-rshb.1.0.0
ci.build.image.app.farm/name: maven
ci.build.image.app.farm/version: 3.9.12-eclipse-temurin-21-rshb.0.2.0
- ci.kubeclientapps.app.farm/version: 8.21.3
+ ci.kubeclientapps.app.farm/version: 8.21.4
ci.runtime.image.app.farm/name: jre
ci.runtime.image.app.farm/version: 21.0.9_10-jre-jammy-rshb.1.0.0
ci.service.app.farm/lang: java
ci.service.app.farm/side: backend
- commitShortSHA: 984f9999
+ commitShortSHA: 83e51878
heritage: Helm
release: psvc-loader-src
version: master
name: loader-src
spec:
cpuLimits: 1000m
cpuRequests: 500m
description: 'Анкетное мошенничество: Сервис загрузки списков - loader'
environment: DEV
informationSystemId: amkkr-dev
name: 'Анкетное мошенничество: loader'
projectPath: /rshbintech/abs/banking-accounting/amkkr/loader-src
publicDomain: loader-src
publishAPI: true
ramLimits: 3072Mi
ramRequests: 2048Mi
replicaCount: 1
roleMapping:
- endpoint: /api/*
public: true
serviceReference:
name: loader-src
namespace: isys-amkkr-dev
side: backend
updateStrategy: Recreate
Comparing release=platform-database-loader-src, chart=rshb-charts/raw
isys-amkkr-dev, loader-src-postgresql-pg-1-rumsk1-sam, PlatformDatabase (production.platform.ckpr.integrations.rshbintech.ru) has changed:
# Source: raw/templates/resources.yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: PlatformDatabase
metadata:
labels:
app: raw
chart: raw-0.2.3-rshb.1.0.0
- ci.kubeclientapps.app.farm/version: 8.21.3
+ ci.kubeclientapps.app.farm/version: 8.21.4
heritage: Helm
release: platform-database-loader-src
workload.topology.app.farm/zone: rumsk1
name: loader-src-postgresql-pg-1-rumsk1-sam
spec:
applicationId: loader-src
environment: DEV
host: 10.7.0.27
id: pg-1
name: sam
port: 5432
systemId: amkkr-dev
type: POSTGRESQL
isys-amkkr-dev, loader-src-postgresql-pg-2-rumsk1-sam, PlatformDatabase (production.platform.ckpr.integrations.rshbintech.ru) has changed:
# Source: raw/templates/resources.yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: PlatformDatabase
metadata:
labels:
app: raw
chart: raw-0.2.3-rshb.1.0.0
- ci.kubeclientapps.app.farm/version: 8.21.3
+ ci.kubeclientapps.app.farm/version: 8.21.4
heritage: Helm
release: platform-database-loader-src
workload.topology.app.farm/zone: rumsk1
name: loader-src-postgresql-pg-2-rumsk1-sam
spec:
applicationId: loader-src
environment: DEV
host: 10.7.0.28
id: pg-2
name: sam
port: 5432
systemId: amkkr-dev
type: POSTGRESQL
Comparing release=loader-src, chart=rshb-charts/base
isys-amkkr-dev, loader-src, Deployment (apps) has changed:
# Source: base/templates/workload.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: loader-src
labels:
app: loader-src
fullname: loader-src
chart: base-1.14.2
release: loader-src
heritage: Helm
isys: "amkkr-dev"
psvc: "loader-src"
version: "master"
workload.topology.app.farm/zone: "rumsk1"
annotations:
- platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 984f9999
- platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3076364"
+ platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 83e51878
+ platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3149853"
spec:
strategy:
type: Recreate
replicas: 1
selector:
matchLabels:
app: loader-src
fullname: loader-src
release: loader-src
template:
metadata:
labels:
app: loader-src
fullname: loader-src
chart: base-1.14.2
release: loader-src
heritage: Helm
isys: "amkkr-dev"
psvc: "loader-src"
version: "master"
workload.topology.app.farm/zone: "rumsk1"
annotations:
checksum/configMapsEnv: "4d10688d8367202fd91085abae9e27617594056b63b4e12dc7caeada8ab2a314"
checksum/secretEnv: "b3cf77ae604becb039d8175848599cf88b49c95f5cdd3f48ab66b84191ec5683"
- ci/commithash: "984f9999"
+ ci/commithash: "83e51878"
inject.istio.io/templates: "sidecar,custom"
prometheus.io/path: "/metrics"
prometheus.io/port: "8080"
prometheus.io/scrape: "true"
sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"amkkr-dev-envoy-filters\"}}]"
sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
spec:
serviceAccountName: default
nodeSelector:
workload.topology.app.farm/zone: rumsk1
priorityClassName:
rumsk1
containers:
- name: app
image: registry.rshbdev.ru/rshbintech/abs/banking-accounting/amkkr/loader-src:master
imagePullPolicy: Always
envFrom:
- configMapRef:
name: loader-src-app-cm-env
- secretRef:
name: loader-src-app-secret-env
resources:
limits:
cpu: 1000m
memory: 3072Mi
requests:
cpu: 500m
memory: 2048Mi
ports:
livenessProbe:
failureThreshold: 5
httpGet:
path: /health/liveness
port: 8080
initialDelaySeconds: 180
periodSeconds: 3
successThreshold: 1
timeoutSeconds: 1
readinessProbe:
failureThreshold: 3
httpGet:
path: /health/readiness
port: 8080
initialDelaySeconds: 180
periodSeconds: 3
successThreshold: 1
timeoutSeconds: 1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
procMount: Default
readOnlyRootFilesystem: false
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
securityContext:
fsGroup: 1001
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
tolerations:
- effect: NoSchedule
key: workload.topology.app.farm/zone
operator: Exists
hostNetwork: false
volumes:
Listing releases matching ^pjob-loader-src$
Listing releases matching ^exsvc-loader-src$
Listing releases matching ^data-loader-src$
Listing releases matching ^assets-config-loader-src$
Listing releases matching ^loader-src-raw$
Listing releases matching ^loader-src-grafana-dashboard$
Listing releases matching ^links-loader-src$
Listing releases matching ^loader-src-rumsk1$
Listing releases matching ^loader-src-rumsk2$
Upgrading release=psvc-loader-src, chart=rshb-charts/raw
Upgrading release=vault-secrets-loader-src, chart=rshb-charts/raw
Upgrading release=platform-database-loader-src, chart=rshb-charts/raw
Release "vault-secrets-loader-src" has been upgraded. Happy Helming!
NAME: vault-secrets-loader-src
LAST DEPLOYED: Tue May 19 12:03:24 2026
NAMESPACE: isys-amkkr-dev
STATUS: deployed
REVISION: 7
TEST SUITE: None
Listing releases matching ^vault-secrets-loader-src$
Release "platform-database-loader-src" has been upgraded. Happy Helming!
NAME: platform-database-loader-src
LAST DEPLOYED: Tue May 19 12:03:24 2026
NAMESPACE: isys-amkkr-dev
STATUS: deployed
REVISION: 7
TEST SUITE: None
Listing releases matching ^platform-database-loader-src$
Release "psvc-loader-src" has been upgraded. Happy Helming!
NAME: psvc-loader-src
LAST DEPLOYED: Tue May 19 12:03:24 2026
NAMESPACE: isys-amkkr-dev
STATUS: deployed
REVISION: 12
TEST SUITE: None
Listing releases matching ^psvc-loader-src$
platform-database-loader-src isys-amkkr-dev 7 2026-05-19 12:03:24.201207535 +0000 UTC deployed raw-0.2.3-rshb.1.0.0 0.2.3
vault-secrets-loader-src isys-amkkr-dev 7 2026-05-19 12:03:24.20386919 +0000 UTC deployed raw-0.2.3-rshb.1.0.0 0.2.3
psvc-loader-src isys-amkkr-dev 12 2026-05-19 12:03:24.20103941 +0000 UTC deployed raw-0.2.3-rshb.1.0.0 0.2.3
Upgrading release=loader-src, chart=rshb-charts/base
Release "loader-src" has been upgraded. Happy Helming!
NAME: loader-src
LAST DEPLOYED: Tue May 19 12:03:30 2026
NAMESPACE: isys-amkkr-dev
STATUS: deployed
REVISION: 16
TEST SUITE: None
Listing releases matching ^loader-src$
loader-src isys-amkkr-dev 16 2026-05-19 12:03:30.112052511 +0000 UTC deployed base-1.14.2 1.0
UPDATED RELEASES:
NAME CHART VERSION
vault-secrets-loader-src rshb-charts/raw 0.2.3-rshb.1.0.0
platform-database-loader-src rshb-charts/raw 0.2.3-rshb.1.0.0
psvc-loader-src rshb-charts/raw 0.2.3-rshb.1.0.0
loader-src rshb-charts/base 1.14.2
++ echo '$ done'
$ done
Uploading artifacts for successful job
00:01
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories
Uploading artifacts as "dotenv" to coordinator... 201 Created id=21959223 responseStatus=201 Created token=64_-ZmqX
Cleaning up project directory and file based variables
00:01
Job succeeded