Загрузка данных


Running with gitlab-runner 15.8.0 (12335144)
  on gitlab-runner-gitlab-runner-7d64bfd458-xlzsd u1oHxtyM, system ID: r_OKg3w9r0mqgd
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.9 ...
Using attach strategy to execute scripts...
Preparing environment
00:06
Waiting for pod gitlab-runners/runner-u1ohxtym-project-50450-concurrent-0cqk9q to be running, status is Pending
Waiting for pod gitlab-runners/runner-u1ohxtym-project-50450-concurrent-0cqk9q to be running, status is Pending
	ContainersNotReady: "containers with unready status: [build helper]"
	ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-u1ohxtym-project-50450-concurrent-0cqk9q via gitlab-runner-gitlab-runner-7d64bfd458-xlzsd...
Getting source from Git repository
00:02
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners/.git/
Created fresh repository.
Checking out ab5f601c as 1.15.0-rc2...
Skipping Git submodules setup
Downloading artifacts
00:03
Downloading artifacts for init_dojo (22871557)...
Downloading artifacts from coordinator... ok        id=22871557 responseStatus=200 OK token=64_8ZmFr
Downloading artifacts for devsecops_antivirus_scan (22871558)...
Downloading artifacts from coordinator... ok        id=22871558 responseStatus=200 OK token=64_8ZmFr
Downloading artifacts for secrets_gitleaks (22871559)...
Downloading artifacts from coordinator... ok        id=22871559 responseStatus=200 OK token=64_8ZmFr
Downloading artifacts for sast_semgrep (22871560)...
Downloading artifacts from coordinator... ok        id=22871560 responseStatus=200 OK token=64_8ZmFr
Downloading artifacts for sast_ptai (22871561)...
Downloading artifacts from coordinator... ok        id=22871561 responseStatus=200 OK token=64_8ZmFr
Downloading artifacts for dockerfilegen (22871562)...
Downloading artifacts from coordinator... ok        id=22871562 responseStatus=200 OK token=64_8ZmFr
Downloading artifacts for sca_scan (22871563)...
Downloading artifacts from coordinator... ok        id=22871563 responseStatus=200 OK token=64_8ZmFr
Downloading artifacts for build (22871565)...
Downloading artifacts from coordinator... ok        id=22871565 responseStatus=200 OK token=64_8ZmFr
Downloading artifacts for unit (22871567)...
Downloading artifacts from coordinator... ok        id=22871567 responseStatus=200 OK token=64_8ZmFr
Downloading artifacts for bca_trivy (22871570)...
Downloading artifacts from coordinator... ok        id=22871570 responseStatus=200 OK token=64_8ZmFr
Executing "step_script" stage of the job script
21:48
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: rcsdstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=rcsdstbl
++ CLUSTER=rcsdstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ rc = production ]]
++ export NAMESPACE=isys-ownfin-rc
++ NAMESPACE=isys-ownfin-rc
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context rcsdstbl -n isys-ownfin-rc history owf-ms-prd-banners
+++ tail -1
+++ cut -f1,3
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ failed =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"
++ helmfile --environment rcsdstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners/-/pipelines/3280535 --set additionalWorkloadAnnotations.gitlabCommit=ab5f601cd5e3dd3ca9d30b09ee9c9bd0f1c91142
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
no matches for path: envs/rc/rcsdstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=vault-secrets-owf-ms-prd-banners, chart=rshb-charts/raw
Comparing release=psvc-owf-ms-prd-banners, chart=rshb-charts/raw
isys-ownfin-rc, owf-ms-prd-banners, PlatformService (production.platform.ckpr.integrations.rshbintech.ru) has changed:
  # Source: raw/templates/resources.yaml
  apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
  kind: PlatformService
  metadata:
    labels:
      app: raw
      chart: raw-0.2.3-rshb.1.0.0
      ci.build.image.app.farm/name: maven
      ci.build.image.app.farm/version: 3.9.12-eclipse-temurin-21-rshb.0.2.1
      ci.kubeclientapps.app.farm/version: 8.21.9
      ci.runtime.image.app.farm/name: jre
      ci.runtime.image.app.farm/version: 21.0.9_10-jre-jammy-rshb.1.0.0
      ci.service.app.farm/lang: java
      ci.service.app.farm/side: backend
-     commitShortSHA: 0607b846
+     commitShortSHA: ab5f601c
      heritage: Helm
      release: psvc-owf-ms-prd-banners
-     version: 1.15.0-rc1
+     version: 1.15.0-rc2
    name: owf-ms-prd-banners
  spec:
    cpuLimits: 1000m
    cpuRequests: 200m
    description: МС Баннеры
    environment: RC
    informationSystemId: ownfin-rc
    istioSidecarSettings:
      limits:
        cpu: 100m
        memory: 800Mi
      requests:
        cpu: 50m
        memory: 128Mi
    name: owf-ms-prd-banners
    projectPath: /rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
    publicDomain: owf-ms-prd-banners
-   publishAPI: true
    ramLimits: 1Gi
    ramRequests: 512Mi
    replicaCount: 1
    serviceReference:
      name: owf-ms-prd-banners
      namespace: isys-ownfin-rc
    side: backend
    updateStrategy: Recreate
Comparing release=platform-database-owf-ms-prd-banners, chart=rshb-charts/raw
Comparing release=links-owf-ms-prd-banners, chart=rshb-charts/raw
Comparing release=owf-ms-prd-banners, chart=rshb-charts/base
isys-ownfin-rc, owf-ms-prd-banners, Deployment (apps) has changed:
  # Source: base/templates/workload.yaml
  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: owf-ms-prd-banners
    labels:
      app: owf-ms-prd-banners
      fullname: owf-ms-prd-banners
-     chart: base-1.14.2
+     chart: base-1.15.2
      release: owf-ms-prd-banners
      heritage: Helm
      isys: "ownfin-rc"
      psvc: "owf-ms-prd-banners"
-     version: "1.14.0-rc2"    
+     version: "1.15.0-rc2"    
      workload.topology.app.farm/zone: "rumsk1"
    annotations:
-     gitlabCommit: 61d604203a6f8022ce2a48b44e3894a724771979
-     gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners/-/pipelines/3188915
-     platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 61d60420
-     platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3188915"
+     gitlabCommit: ab5f601cd5e3dd3ca9d30b09ee9c9bd0f1c91142
+     gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners/-/pipelines/3280535
+     platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: ab5f601c
+     platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3280535"
  spec:
    strategy:
      type: Recreate
    replicas: 1
    selector:
      matchLabels:
        app: owf-ms-prd-banners
        fullname: owf-ms-prd-banners
        release: owf-ms-prd-banners
    template:
      metadata:
        labels:
          app: owf-ms-prd-banners
          fullname: owf-ms-prd-banners
-         chart: base-1.14.2
+         chart: base-1.15.2
          release: owf-ms-prd-banners
          heritage: Helm
          isys: "ownfin-rc"
          psvc: "owf-ms-prd-banners"
-         version: "1.14.0-rc2"        
+         version: "1.15.0-rc2"        
          workload.topology.app.farm/zone: "rumsk1"
        annotations:
-         checksum/configMapsEnv: "35a22502a464687812df58d29a3e5f35d40ce9dce48349175039d15889c86538"
-         checksum/secretEnv: "5f5c5587f62d06625ab74e5e657c5684540dcf118d68409f35f697ce65b94a97"
+         checksum/configMapsEnv: "5f878a81d02bb0f8d66d899a920606255a43544ac610292d06501f4fb6fa7ecc"
+         checksum/secretEnv: "085d904569f6ed22375f07cd04ff8f3e4424f0358b9576688632074a055b7f95"
          inject.istio.io/templates: "sidecar,custom"
          prometheus.io/path: "/metrics"
          prometheus.io/port: "8080"
          prometheus.io/scrape: "true"
          sidecar.istio.io/proxyCPU: "50m"
          sidecar.istio.io/proxyCPULimit: "100m"
          sidecar.istio.io/proxyMemory: "128Mi"
          sidecar.istio.io/proxyMemoryLimit: "800Mi"
          sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"ownfin-rc-envoy-filters\"}}]"
          sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
      spec:
+       automountServiceAccountToken: false
        serviceAccountName: default
        nodeSelector:
          workload.topology.app.farm/zone: rumsk1
-       priorityClassName:
-         rumsk1
+       priorityClassName: rumsk1
        containers:
          - name: app
-           image: registry.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners:1.14.0-rc2
+           image: registry.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners:1.15.0-rc2
            imagePullPolicy: IfNotPresent
            envFrom:
              - configMapRef:
                  name: owf-ms-prd-banners-app-cm-env
              - secretRef:
                  name: owf-ms-prd-banners-app-secret-env
            resources:
              limits:
                cpu: 1000m
                memory: 1Gi
              requests:
                cpu: 200m
                memory: 512Mi
            ports:
            livenessProbe:
              failureThreshold: 5
              httpGet:
                path: /health/liveness
                port: 8080
              initialDelaySeconds: 240
              periodSeconds: 5
              successThreshold: 1
              timeoutSeconds: 1
            readinessProbe:
              failureThreshold: 3
              httpGet:
                path: /health/readiness
                port: 8080
              initialDelaySeconds: 60
              periodSeconds: 4
              successThreshold: 1
              timeoutSeconds: 1
+           volumeMounts:
+             - name: app-vault-secrets
+               mountPath: /secrets
+               readOnly: true
            securityContext: 
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              privileged: false
              procMount: Default
              readOnlyRootFilesystem: false
              runAsGroup: 1001
              runAsNonRoot: true
              runAsUser: 1001
        securityContext: 
          fsGroup: 1001
          fsGroupChangePolicy: OnRootMismatch
          runAsGroup: 1001
          runAsNonRoot: true
          runAsUser: 1001
        tolerations: 
          - effect: NoSchedule
            key: workload.topology.app.farm/zone
            operator: Exists
        hostNetwork: false
        volumes:
+         - name: app-vault-secrets
+           csi:
+             driver: secrets-store.csi.k8s.io
+             readOnly: true
+             volumeAttributes:
+               secretProviderClass: owf-ms-prd-banners-app-secret-provider
isys-ownfin-rc, owf-ms-prd-banners, Service (v1) has changed:
  # Source: base/templates/svc.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: owf-ms-prd-banners
    labels:
      app: owf-ms-prd-banners
      fullname: owf-ms-prd-banners
-     chart: base-1.14.2
+     chart: base-1.15.2
      release: owf-ms-prd-banners
      heritage: Helm
      isys: "ownfin-rc"
      psvc: "owf-ms-prd-banners"
-     version: "1.14.0-rc2"
+     version: "1.15.0-rc2"
  spec:
    ports:
      - name: web
        port: 80
        protocol: TCP
        targetPort: 8080
    selector:
      app: owf-ms-prd-banners
      fullname: owf-ms-prd-banners
      release: owf-ms-prd-banners
    type: ClusterIP
isys-ownfin-rc, owf-ms-prd-banners-app-cm-env, ConfigMap (v1) has changed:
  # Source: base/templates/cm-env.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: owf-ms-prd-banners-app-cm-env
    labels:
      app: owf-ms-prd-banners
      fullname: owf-ms-prd-banners
-     chart: base-1.14.2
+     chart: base-1.15.2
      release: owf-ms-prd-banners
      heritage: Helm
      isys: "ownfin-rc"
      psvc: "owf-ms-prd-banners"
-     version: "1.14.0-rc2"    
+     version: "1.15.0-rc2"    
      workload.topology.app.farm/zone: "rumsk1"
  data:
    APP_POSTGRESQL_NAME: "ownfin-rc"
    APP_POSTGRESQL_PG_1_HOST: "10.21.21.29"
    APP_POSTGRESQL_PG_1_NAME: "ownfin-rc"
    APP_POSTGRESQL_PG_1_PORT: "5432"
    APP_POSTGRESQL_PG_2_HOST: "10.21.21.29"
    APP_POSTGRESQL_PG_2_NAME: "ownfin-rc"
    APP_POSTGRESQL_PG_2_PORT: "5432"
    APP_POSTGRESQL_SCHEMA: "owf_ms_prd_banners"
    EMPLOYEE_ROLE_MODEL_HOST: "http://owf-plt-ms-employee-role-model.isys-ownfin-rc"
    JAVA_OPTS: "-XX:MaxRAMPercentage=75.0 -XX:MinRAMPercentage=75.0 -XX:+AlwaysActAsServerClassMachine"
    KAFKA_CONN_SJ: "10.21.21.30:9092"
    KAFKA_CONN_SVC: "adapter-ownfin-cluster.isys-ownfin-rc-links:9092"
    KAFKA_SECURITY_PROTOCOL: "PLAINTEXT"
    PROFILE: "rc"
    PUBLIC_KEY_URI: "https://auth.rshbdev.ru/auth/realms/platform/protocol/openid-connect/certs"
    TOKEN_VALIDATION_SERVICE_URL: "http://owf-ms-plt-token-verification.isys-ownfin-rc"
isys-ownfin-rc, owf-ms-prd-banners-app-secret-env, Secret (v1) has changed:
+ Changes suppressed on sensitive content of type Secret
isys-ownfin-rc, owf-ms-prd-banners-app-secret-provider, SecretProviderClass (secrets-store.csi.x-k8s.io) has been added:
- 
+ # Source: base/templates/secret-provider.yaml
+ apiVersion: secrets-store.csi.x-k8s.io/v1
+ kind: SecretProviderClass
+ metadata:
+   name: owf-ms-prd-banners-app-secret-provider
+   labels:
+     app: owf-ms-prd-banners
+     fullname: owf-ms-prd-banners
+     chart: base-1.15.2
+     release: owf-ms-prd-banners
+     heritage: Helm
+     isys: "ownfin-rc"
+     psvc: "owf-ms-prd-banners"
+     version: "1.15.0-rc2"    
+     workload.topology.app.farm/zone: "rumsk1"
+ spec:
+   provider: vault
+   parameters:
+     vaultKubernetesMountPath: rcsdstbl
+     roleName: "csi-secrets-reader-rc"
+     objects: |
+       - objectName: APP_POSTGRESQL_MIGRATION_PASSWORD
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_MIGRATION_PASSWORD
+       - objectName: APP_POSTGRESQL_MIGRATION_USER
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_MIGRATION_USER
+       - objectName: APP_POSTGRESQL_PASSWORD
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_1_MIGRATION_USER
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_PG_1_MIGRATION_USER
+       - objectName: APP_POSTGRESQL_PG_1_PASSWORD
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_PG_1_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_1_USER
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_PG_1_USER
+       - objectName: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_2_MIGRATION_USER
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_PG_2_MIGRATION_USER
+       - objectName: APP_POSTGRESQL_PG_2_PASSWORD
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_PG_2_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_2_USER
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_PG_2_USER
+       - objectName: APP_POSTGRESQL_USER
+         secretPath: manual_kv_rc/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners
+         secretKey: APP_POSTGRESQL_USER
+   secretObjects:
+     - secretName: owf-ms-prd-banners-app-secret-env
+       type: Opaque
+       labels:
+         app: owf-ms-prd-banners
+         fullname: owf-ms-prd-banners
+         chart: base-1.15.2
+         release: owf-ms-prd-banners
+         heritage: Helm
+         isys: "ownfin-rc"
+         psvc: "owf-ms-prd-banners"
+         version: "1.15.0-rc2"        
+         workload.topology.app.farm/zone: "rumsk1"
+       data:
+         - objectName: APP_POSTGRESQL_MIGRATION_PASSWORD
+           key: APP_POSTGRESQL_MIGRATION_PASSWORD
+         - objectName: APP_POSTGRESQL_MIGRATION_USER
+           key: APP_POSTGRESQL_MIGRATION_USER
+         - objectName: APP_POSTGRESQL_PASSWORD
+           key: APP_POSTGRESQL_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+           key: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_1_MIGRATION_USER
+           key: APP_POSTGRESQL_PG_1_MIGRATION_USER
+         - objectName: APP_POSTGRESQL_PG_1_PASSWORD
+           key: APP_POSTGRESQL_PG_1_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_1_USER
+           key: APP_POSTGRESQL_PG_1_USER
+         - objectName: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+           key: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_2_MIGRATION_USER
+           key: APP_POSTGRESQL_PG_2_MIGRATION_USER
+         - objectName: APP_POSTGRESQL_PG_2_PASSWORD
+           key: APP_POSTGRESQL_PG_2_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_2_USER
+           key: APP_POSTGRESQL_PG_2_USER
+         - objectName: APP_POSTGRESQL_USER
+           key: APP_POSTGRESQL_USER
Listing releases matching ^pjob-owf-ms-prd-banners$
Listing releases matching ^exsvc-owf-ms-prd-banners$
Listing releases matching ^data-owf-ms-prd-banners$
Listing releases matching ^assets-config-owf-ms-prd-banners$
Listing releases matching ^owf-ms-prd-banners-raw$
Listing releases matching ^owf-ms-prd-banners-grafana-dashboard$
Listing releases matching ^owf-ms-prd-banners-rumsk1$
Listing releases matching ^owf-ms-prd-banners-rumsk2$
Upgrading release=psvc-owf-ms-prd-banners, chart=rshb-charts/raw
Release "psvc-owf-ms-prd-banners" has been upgraded. Happy Helming!
NAME: psvc-owf-ms-prd-banners
LAST DEPLOYED: Fri Jun 26 07:10:15 2026
NAMESPACE: isys-ownfin-rc
STATUS: deployed
REVISION: 36
TEST SUITE: None
Listing releases matching ^psvc-owf-ms-prd-banners$
psvc-owf-ms-prd-banners	isys-ownfin-rc	36      	2026-06-26 07:10:15.928985101 +0000 UTC	deployed	raw-0.2.3-rshb.1.0.0	0.2.3      
Upgrading release=owf-ms-prd-banners, chart=rshb-charts/base
UPDATED RELEASES:
NAME                      CHART                      VERSION
psvc-owf-ms-prd-banners   rshb-charts/raw   0.2.3-rshb.1.0.0
FAILED RELEASES:
NAME
owf-ms-prd-banners
in deploy/helmfile.yaml: failed processing release owf-ms-prd-banners: command "/usr/local/link/helm" exited with non-zero status:
PATH:
  /usr/local/link/helm
ARGS:
  0: helm (4 bytes)
  1: --kube-context (14 bytes)
  2: rcsdstbl (8 bytes)
  3: upgrade (7 bytes)
  4: --install (9 bytes)
  5: --reset-values (14 bytes)
  6: owf-ms-prd-banners (18 bytes)
  7: rshb-charts/base (16 bytes)
  8: --version (9 bytes)
  9: 1.15.2 (6 bytes)
  10: --wait (6 bytes)
  11: --timeout (9 bytes)
  12: 600s (4 bytes)
  13: --atomic (8 bytes)
  14: --kube-context (14 bytes)
  15: rcsdstbl (8 bytes)
  16: --namespace (11 bytes)
  17: isys-ownfin-rc (14 bytes)
  18: --values (8 bytes)
  19: /tmp/helmfile1377564977/isys-ownfin-rc-owf-ms-prd-banners-values-5c96844547 (75 bytes)
  20: --values (8 bytes)
  21: /tmp/helmfile1963303195/isys-ownfin-rc-owf-ms-prd-banners-values-6b4f68b9f7 (75 bytes)
  22: --set (5 bytes)
  23: additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-banners/-/pipelines/3280535 (149 bytes)
  24: --set (5 bytes)
  25: additionalWorkloadAnnotations.gitlabCommit=ab5f601cd5e3dd3ca9d30b09ee9c9bd0f1c91142 (83 bytes)
  26: --history-max (13 bytes)
  27: 10 (2 bytes)
ERROR:
  exit status 1
EXIT STATUS
  1
STDERR:
  Error: UPGRADE FAILED: an error occurred while rolling back the release. original upgrade error: timed out waiting for the condition: release owf-ms-prd-banners failed: timed out waiting for the condition
COMBINED OUTPUT:
  Error: UPGRADE FAILED: an error occurred while rolling back the release. original upgrade error: timed out waiting for the condition: release owf-ms-prd-banners failed: timed out waiting for the condition
Uploading artifacts for failed job
00:02
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories 
Uploading artifacts as "dotenv" to coordinator... 201 Created  id=22871572 responseStatus=201 Created token=64_8ZmFr
Cleaning up project directory and file based variables
00:00
ERROR: Job failed: command terminated with exit code 1