Загрузка данных

Running with gitlab-runner 15.8.0 (12335144)
  on gitlab-runner-gitlab-runner-7d64bfd458-xlzsd u1oHxtyM, system ID: r_OKg3w9r0mqgd
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.9 ...
Using attach strategy to execute scripts...
Preparing environment
00:06
Waiting for pod gitlab-runners/runner-u1ohxtym-project-69333-concurrent-19ltjn to be running, status is Pending
Waiting for pod gitlab-runners/runner-u1ohxtym-project-69333-concurrent-19ltjn to be running, status is Pending
	ContainersNotReady: "containers with unready status: [build helper]"
	ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-u1ohxtym-project-69333-concurrent-19ltjn via gitlab-runner-gitlab-runner-7d64bfd458-xlzsd...
Getting source from Git repository
00:03
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance/.git/
Created fresh repository.
Checking out cbfddfe9 as stress...
Skipping Git submodules setup
Downloading artifacts
00:01
Downloading artifacts for devsecops_antivirus_scan (22823409)...
Downloading artifacts from coordinator... ok        id=22823409 responseStatus=200 OK token=64_Jdrhw
Downloading artifacts for dockerfilegen (22823411)...
Downloading artifacts from coordinator... ok        id=22823411 responseStatus=200 OK token=64_Jdrhw
Downloading artifacts for build (22823414)...
Downloading artifacts from coordinator... ok        id=22823414 responseStatus=200 OK token=64_Jdrhw
Downloading artifacts for unit (22823421)...
Downloading artifacts from coordinator... ok        id=22823421 responseStatus=200 OK token=64_Jdrhw
Executing "step_script" stage of the job script
00:56
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: rcsdstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=rcsdstbl
++ CLUSTER=rcsdstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ stress = production ]]
++ export NAMESPACE=isys-ownfin-stress
++ NAMESPACE=isys-ownfin-stress
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context rcsdstbl -n isys-ownfin-stress history owf-ms-prd-insurance
+++ tail -1
+++ cut -f1,3
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ deployed =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"
++ helmfile --environment rcsdstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance/-/pipelines/3273926 --set additionalWorkloadAnnotations.gitlabCommit=cbfddfe93e9eb0cade16c99355243844d0caaf91
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
no matches for path: envs/stress/rcsdstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=vault-secrets-owf-ms-prd-insurance, chart=rshb-charts/raw
Comparing release=psvc-owf-ms-prd-insurance, chart=rshb-charts/raw
Comparing release=platform-database-owf-ms-prd-insurance, chart=rshb-charts/raw
Comparing release=owf-ms-prd-insurance-grafana-dashboard, chart=rshb-charts/grafana-dashboards
Comparing release=links-owf-ms-prd-insurance, chart=rshb-charts/raw
Comparing release=owf-ms-prd-insurance-rumsk1, chart=rshb-charts/base
isys-ownfin-stress, owf-ms-prd-insurance-rumsk1, Deployment (apps) has changed:
  # Source: base/templates/workload.yaml
  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: owf-ms-prd-insurance-rumsk1
    labels:
      app: owf-ms-prd-insurance
      fullname: owf-ms-prd-insurance-rumsk1
-     chart: base-1.14.2
+     chart: base-1.15.2
      release: owf-ms-prd-insurance-rumsk1
      heritage: Helm
      isys: "ownfin-stress"
      psvc: "owf-ms-prd-insurance"
      version: "stress"    
      workload.topology.app.farm/zone: "rumsk1"
    annotations:
-     platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: fc486288
-     platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3056799"
+     gitlabCommit: cbfddfe93e9eb0cade16c99355243844d0caaf91
+     gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance/-/pipelines/3273926
+     platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: cbfddfe9
+     platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3273926"
  spec:
    strategy:
      type: Recreate
    replicas: 1
    selector:
      matchLabels:
        app: owf-ms-prd-insurance
        fullname: owf-ms-prd-insurance-rumsk1
        release: owf-ms-prd-insurance-rumsk1
    template:
      metadata:
        labels:
          app: owf-ms-prd-insurance
          fullname: owf-ms-prd-insurance-rumsk1
-         chart: base-1.14.2
+         chart: base-1.15.2
          release: owf-ms-prd-insurance-rumsk1
          heritage: Helm
          isys: "ownfin-stress"
          psvc: "owf-ms-prd-insurance"
          version: "stress"        
          workload.topology.app.farm/zone: "rumsk1"
        annotations:
-         checksum/configMapsEnv: "a0e8890e67a490d034a6703ceadfa0b15662d0fcea9d34b94edb89ea4152ac5b"
-         checksum/secretEnv: "cca471744a08e4c976426915f22def2bc45b8d8fc958284e570e9fd5fec31934"
-         ci/commithash: "fc486288"
+         checksum/configMapsEnv: "3c5d05f22895c22a8e7d84a1d16b50bd7fb11ea5bd24a0ec7277d5e4ca08c276"
+         checksum/secretEnv: "66d98fb0bd336f3a6a1eebb03032e41618767493be3d7ba71ef3f1136fd72aab"
+         ci/commithash: "cbfddfe9"
          inject.istio.io/templates: "sidecar,custom"
          prometheus.io/path: "/metrics"
          prometheus.io/port: "8080"
          prometheus.io/scrape: "true"
          sidecar.istio.io/proxyCPU: "10m"
          sidecar.istio.io/proxyCPULimit: "800m"
          sidecar.istio.io/proxyMemory: "40Mi"
          sidecar.istio.io/proxyMemoryLimit: "800Mi"
          sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"ownfin-stress-envoy-filters\"}}]"
          sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
      spec:
+       automountServiceAccountToken: false
        serviceAccountName: default
        nodeSelector:
          node-role.kubernetes.io/wload: ""
          workload.topology.app.farm/zone: rumsk1
-       priorityClassName:
-         rumsk1
+       priorityClassName: rumsk1
        containers:
          - name: app
            image: registry.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance:stress
            imagePullPolicy: Always
            envFrom:
              - configMapRef:
                  name: owf-ms-prd-insurance-rumsk1-app-cm-env
              - secretRef:
                  name: owf-ms-prd-insurance-rumsk1-app-secret-env
            resources:
              limits:
                cpu: 1500m
                memory: 1.5Gi
              requests:
                cpu: 500m
                memory: 750Mi
            ports:
            livenessProbe:
              failureThreshold: 5
              httpGet:
                path: /health/liveness
                port: 8080
              initialDelaySeconds: 100
              periodSeconds: 5
              successThreshold: 1
              timeoutSeconds: 1
            readinessProbe:
              failureThreshold: 3
              httpGet:
                path: /health/readiness
                port: 8080
              initialDelaySeconds: 100
              periodSeconds: 10
              successThreshold: 1
              timeoutSeconds: 1
+           volumeMounts:
+             - name: app-vault-secrets
+               mountPath: /secrets
+               readOnly: true
            securityContext: 
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              privileged: false
              procMount: Default
              readOnlyRootFilesystem: false
              runAsGroup: 1001
              runAsNonRoot: true
              runAsUser: 1001
        securityContext: 
          fsGroup: 1001
          fsGroupChangePolicy: OnRootMismatch
          runAsGroup: 1001
          runAsNonRoot: true
          runAsUser: 1001
        tolerations: 
          - effect: NoSchedule
            key: node-role.kubernetes.io/wload
            operator: Exists
          - effect: NoSchedule
            key: workload.topology.app.farm/zone
            operator: Exists
        hostNetwork: false
        volumes:
+         - name: app-vault-secrets
+           csi:
+             driver: secrets-store.csi.k8s.io
+             readOnly: true
+             volumeAttributes:
+               secretProviderClass: owf-ms-prd-insurance-rumsk1-app-secret-provider
isys-ownfin-stress, owf-ms-prd-insurance-rumsk1, Service (v1) has changed:
  # Source: base/templates/svc.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: owf-ms-prd-insurance-rumsk1
    labels:
      app: owf-ms-prd-insurance
      fullname: owf-ms-prd-insurance-rumsk1
-     chart: base-1.14.2
+     chart: base-1.15.2
      release: owf-ms-prd-insurance-rumsk1
      heritage: Helm
      isys: "ownfin-stress"
      psvc: "owf-ms-prd-insurance"
      version: "stress"
  spec:
    ports:
      - name: web
        port: 80
        protocol: TCP
        targetPort: 8080
    selector:
      app: owf-ms-prd-insurance
      fullname: owf-ms-prd-insurance-rumsk1
      release: owf-ms-prd-insurance-rumsk1
    type: ClusterIP
isys-ownfin-stress, owf-ms-prd-insurance-rumsk1-app-cm-env, ConfigMap (v1) has changed:
  # Source: base/templates/cm-env.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: owf-ms-prd-insurance-rumsk1-app-cm-env
    labels:
      app: owf-ms-prd-insurance
      fullname: owf-ms-prd-insurance-rumsk1
-     chart: base-1.14.2
+     chart: base-1.15.2
      release: owf-ms-prd-insurance-rumsk1
      heritage: Helm
      isys: "ownfin-stress"
      psvc: "owf-ms-prd-insurance"
      version: "stress"    
      workload.topology.app.farm/zone: "rumsk1"
  data:
    ACCOUNT_URL: "http://owf-ms-plt-account-registry.isys-ownfin-dev"
    APP_POSTGRESQL_PG_1_HOST: "10.21.25.47"
    APP_POSTGRESQL_PG_1_NAME: "ownfin-stress"
    APP_POSTGRESQL_PG_1_PORT: "5432"
    APP_POSTGRESQL_PG_2_HOST: "10.21.25.47"
    APP_POSTGRESQL_PG_2_NAME: "ownfin-stress"
    APP_POSTGRESQL_PG_2_PORT: "5432"
    APP_POSTGRESQL_SCHEMA: "owf_ms_prd_insurance"
    CARD_URL: "http://owf-ms-plt-card-registry.isys-ownfin-dev"
    CLIENT_PROFILE_URL: "http://owf-ms-plt-client-profile.isys-ownfin-dev"
    CONFIRMATION_HOST: "http://owf-ms-prd-insurance-stub.isys-ownfin-stress/api/stub-insurance/external/v1"
    DADATA_HOST: "http://owf-ms-prd-insurance-stub.isys-ownfin-stress/api/stub-insurance/external/v1"
    INSURANCE_INTEGRATION_HOST: "http://owf-ms-prd-insurance-stub.isys-ownfin-stress/api/stub-insurance/external/v1"
    JAVA_OPTS: "-XX:MaxRAMPercentage=75.0 -XX:MinRAMPercentage=75.0 -XX:+AlwaysActAsServerClassMachine"
    KAFKA_CONFIRMATION_ACTIVE: "false"
    KAFKA_CONN_SVC: "adapter-ownfin-cluster.isys-ownfin-stress-links:9092"
    KAFKA_PAYMENTS_ACTIVE: "false"
    KAFKA_SF_ACTIVE: "false"
    MOCKED_AUTH_ENABLED: "true"
    MOCKED_DADATA_ENABLED: "false"
    MOCKED_EPRSHB_ENABLED: "false"
    MS_AUTH_URL: "http://owf-ms-plt-authentication.isys-ownfin-dev"
    PROFILE: "stress"
    REPLICATION_ACCOUNT_BALANCE_TOPIC: "plt_account-registry_account_balance_pub"
    REPLICATION_ACCOUNT_DETAILS_TOPIC: "plt_account-registry_account_details_pub"
    REPLICATION_ACCOUNT_ENABLED: "false"
    REPLICATION_CARD_BALANCE_TOPIC: "plt_card-registry_account_balance_pub"
    REPLICATION_CARD_DETAILS_TOPIC: "plt_card-registry_account_details_pub"
    REPLICATION_CARD_ENABLED: "false"
    REPLICATION_CLIENT_PROFILE_ENABLED: "false"
    REPLICATION_CLIENT_PROFILE_TOPIC: "plt_client_pub"
    REPLICATION_ENABLED: "false"
    TEST_ROLLBACK_ON_UPDATE: "true"
    TOKEN_VALIDATION_SERVICE_URL: "http://owf-ms-plt-token-verification.isys-ownfin-dev/api/ms-token-validation"
+   TRAVEL_INSURANCE_HOST: "http://owf-ms-prd-insurance-stub.isys-ownfin-stress/api/stub-insurance/external/v1/travel"
+   TRAVEL_LOGS_MASKING: "false"
isys-ownfin-stress, owf-ms-prd-insurance-rumsk1-app-secret-env, Secret (v1) has changed:
+ Changes suppressed on sensitive content of type Secret
isys-ownfin-stress, owf-ms-prd-insurance-rumsk1-app-secret-provider, SecretProviderClass (secrets-store.csi.x-k8s.io) has been added:
- 
+ # Source: base/templates/secret-provider.yaml
+ apiVersion: secrets-store.csi.x-k8s.io/v1
+ kind: SecretProviderClass
+ metadata:
+   name: owf-ms-prd-insurance-rumsk1-app-secret-provider
+   labels:
+     app: owf-ms-prd-insurance
+     fullname: owf-ms-prd-insurance-rumsk1
+     chart: base-1.15.2
+     release: owf-ms-prd-insurance-rumsk1
+     heritage: Helm
+     isys: "ownfin-stress"
+     psvc: "owf-ms-prd-insurance"
+     version: "stress"    
+     workload.topology.app.farm/zone: "rumsk1"
+ spec:
+   provider: vault
+   parameters:
+     vaultKubernetesMountPath: rcsdstbl
+     roleName: "csi-secrets-reader-stress"
+     objects: |
+       - objectName: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_1_MIGRATION_USER
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_1_MIGRATION_USER
+       - objectName: APP_POSTGRESQL_PG_1_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_1_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_1_USER
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_1_USER
+       - objectName: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_2_MIGRATION_USER
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_2_MIGRATION_USER
+       - objectName: APP_POSTGRESQL_PG_2_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_2_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_2_USER
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_2_USER
+       - objectName: TRAVEL_INS_BASIC_AUTH_LOGIN
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: TRAVEL_INS_BASIC_AUTH_LOGIN
+       - objectName: TRAVEL_INS_BASIC_AUTH_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: TRAVEL_INS_BASIC_AUTH_PASSWORD
+       - objectName: TRAVEL_INS_TOKEN_AUTH_LOGIN
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: TRAVEL_INS_TOKEN_AUTH_LOGIN
+       - objectName: TRAVEL_INS_TOKEN_AUTH_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: TRAVEL_INS_TOKEN_AUTH_PASSWORD
+   secretObjects:
+     - secretName: owf-ms-prd-insurance-rumsk1-app-secret-env
+       type: Opaque
+       labels:
+         app: owf-ms-prd-insurance
+         fullname: owf-ms-prd-insurance-rumsk1
+         chart: base-1.15.2
+         release: owf-ms-prd-insurance-rumsk1
+         heritage: Helm
+         isys: "ownfin-stress"
+         psvc: "owf-ms-prd-insurance"
+         version: "stress"        
+         workload.topology.app.farm/zone: "rumsk1"
+       data:
+         - objectName: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+           key: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_1_MIGRATION_USER
+           key: APP_POSTGRESQL_PG_1_MIGRATION_USER
+         - objectName: APP_POSTGRESQL_PG_1_PASSWORD
+           key: APP_POSTGRESQL_PG_1_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_1_USER
+           key: APP_POSTGRESQL_PG_1_USER
+         - objectName: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+           key: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_2_MIGRATION_USER
+           key: APP_POSTGRESQL_PG_2_MIGRATION_USER
+         - objectName: APP_POSTGRESQL_PG_2_PASSWORD
+           key: APP_POSTGRESQL_PG_2_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_2_USER
+           key: APP_POSTGRESQL_PG_2_USER
+         - objectName: TRAVEL_INS_BASIC_AUTH_LOGIN
+           key: TRAVEL_INS_BASIC_AUTH_LOGIN
+         - objectName: TRAVEL_INS_BASIC_AUTH_PASSWORD
+           key: TRAVEL_INS_BASIC_AUTH_PASSWORD
+         - objectName: TRAVEL_INS_TOKEN_AUTH_LOGIN
+           key: TRAVEL_INS_TOKEN_AUTH_LOGIN
+         - objectName: TRAVEL_INS_TOKEN_AUTH_PASSWORD
+           key: TRAVEL_INS_TOKEN_AUTH_PASSWORD
Comparing release=owf-ms-prd-insurance-rumsk2, chart=rshb-charts/base
isys-ownfin-stress, owf-ms-prd-insurance-rumsk2, Deployment (apps) has changed:
  # Source: base/templates/workload.yaml
  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: owf-ms-prd-insurance-rumsk2
    labels:
      app: owf-ms-prd-insurance
      fullname: owf-ms-prd-insurance-rumsk2
-     chart: base-1.14.2
+     chart: base-1.15.2
      release: owf-ms-prd-insurance-rumsk2
      heritage: Helm
      isys: "ownfin-stress"
      psvc: "owf-ms-prd-insurance"
      version: "stress"    
      workload.topology.app.farm/zone: "rumsk2"
    annotations:
-     platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: fc486288
-     platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3056799"
+     gitlabCommit: cbfddfe93e9eb0cade16c99355243844d0caaf91
+     gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance/-/pipelines/3273926
+     platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: cbfddfe9
+     platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3273926"
  spec:
    strategy:
      type: Recreate
    replicas: 1
    selector:
      matchLabels:
        app: owf-ms-prd-insurance
        fullname: owf-ms-prd-insurance-rumsk2
        release: owf-ms-prd-insurance-rumsk2
    template:
      metadata:
        labels:
          app: owf-ms-prd-insurance
          fullname: owf-ms-prd-insurance-rumsk2
-         chart: base-1.14.2
+         chart: base-1.15.2
          release: owf-ms-prd-insurance-rumsk2
          heritage: Helm
          isys: "ownfin-stress"
          psvc: "owf-ms-prd-insurance"
          version: "stress"        
          workload.topology.app.farm/zone: "rumsk2"
        annotations:
-         checksum/configMapsEnv: "9a29b738f5a1efda5c0864bd81dcb80aa46640764c6aa0c8bf52379e3c229fec"
-         checksum/secretEnv: "0879da082430f5df56c2b78cda4b1b2ad641a29b3a3c4e4e408e81f3799556b1"
-         ci/commithash: "fc486288"
+         checksum/configMapsEnv: "c25a38d4fb1993c16c7e615129368d825e43b8460b704bbe129c837b902bb253"
+         checksum/secretEnv: "ff1dcd93af46da11390b6ca4c2525a3d0efa03562c8495c6361818bf65987e50"
+         ci/commithash: "cbfddfe9"
          inject.istio.io/templates: "sidecar,custom"
          prometheus.io/path: "/metrics"
          prometheus.io/port: "8080"
          prometheus.io/scrape: "true"
          sidecar.istio.io/proxyCPU: "10m"
          sidecar.istio.io/proxyCPULimit: "800m"
          sidecar.istio.io/proxyMemory: "40Mi"
          sidecar.istio.io/proxyMemoryLimit: "800Mi"
          sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"ownfin-stress-envoy-filters\"}}]"
          sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
      spec:
+       automountServiceAccountToken: false
        serviceAccountName: default
        nodeSelector:
          node-role.kubernetes.io/wload: ""
          workload.topology.app.farm/zone: rumsk2
-       priorityClassName:
-         rumsk2
+       priorityClassName: rumsk2
        containers:
          - name: app
            image: registry.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance:stress
            imagePullPolicy: Always
            envFrom:
              - configMapRef:
                  name: owf-ms-prd-insurance-rumsk2-app-cm-env
              - secretRef:
                  name: owf-ms-prd-insurance-rumsk2-app-secret-env
            resources:
              limits:
                cpu: 1500m
                memory: 1.5Gi
              requests:
                cpu: 500m
                memory: 750Mi
            ports:
            livenessProbe:
              failureThreshold: 5
              httpGet:
                path: /health/liveness
                port: 8080
              initialDelaySeconds: 100
              periodSeconds: 5
              successThreshold: 1
              timeoutSeconds: 1
            readinessProbe:
              failureThreshold: 3
              httpGet:
                path: /health/readiness
                port: 8080
              initialDelaySeconds: 100
              periodSeconds: 10
              successThreshold: 1
              timeoutSeconds: 1
+           volumeMounts:
+             - name: app-vault-secrets
+               mountPath: /secrets
+               readOnly: true
            securityContext: 
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              privileged: false
              procMount: Default
              readOnlyRootFilesystem: false
              runAsGroup: 1001
              runAsNonRoot: true
              runAsUser: 1001
        securityContext: 
          fsGroup: 1001
          fsGroupChangePolicy: OnRootMismatch
          runAsGroup: 1001
          runAsNonRoot: true
          runAsUser: 1001
        tolerations: 
          - effect: NoSchedule
            key: node-role.kubernetes.io/wload
            operator: Exists
          - effect: NoSchedule
            key: workload.topology.app.farm/zone
            operator: Exists
        hostNetwork: false
        volumes:
+         - name: app-vault-secrets
+           csi:
+             driver: secrets-store.csi.k8s.io
+             readOnly: true
+             volumeAttributes:
+               secretProviderClass: owf-ms-prd-insurance-rumsk2-app-secret-provider
isys-ownfin-stress, owf-ms-prd-insurance-rumsk2, Service (v1) has changed:
  # Source: base/templates/svc.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: owf-ms-prd-insurance-rumsk2
    labels:
      app: owf-ms-prd-insurance
      fullname: owf-ms-prd-insurance-rumsk2
-     chart: base-1.14.2
+     chart: base-1.15.2
      release: owf-ms-prd-insurance-rumsk2
      heritage: Helm
      isys: "ownfin-stress"
      psvc: "owf-ms-prd-insurance"
      version: "stress"
  spec:
    ports:
      - name: web
        port: 80
        protocol: TCP
        targetPort: 8080
    selector:
      app: owf-ms-prd-insurance
      fullname: owf-ms-prd-insurance-rumsk2
      release: owf-ms-prd-insurance-rumsk2
    type: ClusterIP
isys-ownfin-stress, owf-ms-prd-insurance-rumsk2-app-cm-env, ConfigMap (v1) has changed:
  # Source: base/templates/cm-env.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: owf-ms-prd-insurance-rumsk2-app-cm-env
    labels:
      app: owf-ms-prd-insurance
      fullname: owf-ms-prd-insurance-rumsk2
-     chart: base-1.14.2
+     chart: base-1.15.2
      release: owf-ms-prd-insurance-rumsk2
      heritage: Helm
      isys: "ownfin-stress"
      psvc: "owf-ms-prd-insurance"
      version: "stress"    
      workload.topology.app.farm/zone: "rumsk2"
  data:
    ACCOUNT_URL: "http://owf-ms-plt-account-registry.isys-ownfin-dev"
    APP_POSTGRESQL_PG_1_HOST: "10.21.25.47"
    APP_POSTGRESQL_PG_1_NAME: "ownfin-stress"
    APP_POSTGRESQL_PG_1_PORT: "5432"
    APP_POSTGRESQL_PG_2_HOST: "10.21.25.47"
    APP_POSTGRESQL_PG_2_NAME: "ownfin-stress"
    APP_POSTGRESQL_PG_2_PORT: "5432"
    APP_POSTGRESQL_SCHEMA: "owf_ms_prd_insurance"
    CARD_URL: "http://owf-ms-plt-card-registry.isys-ownfin-dev"
    CLIENT_PROFILE_URL: "http://owf-ms-plt-client-profile.isys-ownfin-dev"
    CONFIRMATION_HOST: "http://owf-ms-prd-insurance-stub.isys-ownfin-stress/api/stub-insurance/external/v1"
    DADATA_HOST: "http://owf-ms-prd-insurance-stub.isys-ownfin-stress/api/stub-insurance/external/v1"
    INSURANCE_INTEGRATION_HOST: "http://owf-ms-prd-insurance-stub.isys-ownfin-stress/api/stub-insurance/external/v1"
    JAVA_OPTS: "-XX:MaxRAMPercentage=75.0 -XX:MinRAMPercentage=75.0 -XX:+AlwaysActAsServerClassMachine"
    KAFKA_CONFIRMATION_ACTIVE: "false"
    KAFKA_CONN_SVC: "adapter-ownfin-cluster.isys-ownfin-stress-links:9092"
    KAFKA_PAYMENTS_ACTIVE: "false"
    KAFKA_SF_ACTIVE: "false"
    MOCKED_AUTH_ENABLED: "true"
    MOCKED_DADATA_ENABLED: "false"
    MOCKED_EPRSHB_ENABLED: "false"
    MS_AUTH_URL: "http://owf-ms-plt-authentication.isys-ownfin-dev"
    PROFILE: "stress"
    REPLICATION_ACCOUNT_BALANCE_TOPIC: "plt_account-registry_account_balance_pub"
    REPLICATION_ACCOUNT_DETAILS_TOPIC: "plt_account-registry_account_details_pub"
    REPLICATION_ACCOUNT_ENABLED: "false"
    REPLICATION_CARD_BALANCE_TOPIC: "plt_card-registry_account_balance_pub"
    REPLICATION_CARD_DETAILS_TOPIC: "plt_card-registry_account_details_pub"
    REPLICATION_CARD_ENABLED: "false"
    REPLICATION_CLIENT_PROFILE_ENABLED: "false"
    REPLICATION_CLIENT_PROFILE_TOPIC: "plt_client_pub"
    REPLICATION_ENABLED: "false"
    TEST_ROLLBACK_ON_UPDATE: "true"
    TOKEN_VALIDATION_SERVICE_URL: "http://owf-ms-plt-token-verification.isys-ownfin-dev/api/ms-token-validation"
+   TRAVEL_INSURANCE_HOST: "http://owf-ms-prd-insurance-stub.isys-ownfin-stress/api/stub-insurance/external/v1/travel"
+   TRAVEL_LOGS_MASKING: "false"
isys-ownfin-stress, owf-ms-prd-insurance-rumsk2-app-secret-env, Secret (v1) has changed:
+ Changes suppressed on sensitive content of type Secret
isys-ownfin-stress, owf-ms-prd-insurance-rumsk2-app-secret-provider, SecretProviderClass (secrets-store.csi.x-k8s.io) has been added:
- 
+ # Source: base/templates/secret-provider.yaml
+ apiVersion: secrets-store.csi.x-k8s.io/v1
+ kind: SecretProviderClass
+ metadata:
+   name: owf-ms-prd-insurance-rumsk2-app-secret-provider
+   labels:
+     app: owf-ms-prd-insurance
+     fullname: owf-ms-prd-insurance-rumsk2
+     chart: base-1.15.2
+     release: owf-ms-prd-insurance-rumsk2
+     heritage: Helm
+     isys: "ownfin-stress"
+     psvc: "owf-ms-prd-insurance"
+     version: "stress"    
+     workload.topology.app.farm/zone: "rumsk2"
+ spec:
+   provider: vault
+   parameters:
+     vaultKubernetesMountPath: rcsdstbl
+     roleName: "csi-secrets-reader-stress"
+     objects: |
+       - objectName: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_1_MIGRATION_USER
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_1_MIGRATION_USER
+       - objectName: APP_POSTGRESQL_PG_1_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_1_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_1_USER
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_1_USER
+       - objectName: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_2_MIGRATION_USER
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_2_MIGRATION_USER
+       - objectName: APP_POSTGRESQL_PG_2_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_2_PASSWORD
+       - objectName: APP_POSTGRESQL_PG_2_USER
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: APP_POSTGRESQL_PG_2_USER
+       - objectName: TRAVEL_INS_BASIC_AUTH_LOGIN
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: TRAVEL_INS_BASIC_AUTH_LOGIN
+       - objectName: TRAVEL_INS_BASIC_AUTH_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: TRAVEL_INS_BASIC_AUTH_PASSWORD
+       - objectName: TRAVEL_INS_TOKEN_AUTH_LOGIN
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: TRAVEL_INS_TOKEN_AUTH_LOGIN
+       - objectName: TRAVEL_INS_TOKEN_AUTH_PASSWORD
+         secretPath: manual_kv_stress/data/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance
+         secretKey: TRAVEL_INS_TOKEN_AUTH_PASSWORD
+   secretObjects:
+     - secretName: owf-ms-prd-insurance-rumsk2-app-secret-env
+       type: Opaque
+       labels:
+         app: owf-ms-prd-insurance
+         fullname: owf-ms-prd-insurance-rumsk2
+         chart: base-1.15.2
+         release: owf-ms-prd-insurance-rumsk2
+         heritage: Helm
+         isys: "ownfin-stress"
+         psvc: "owf-ms-prd-insurance"
+         version: "stress"        
+         workload.topology.app.farm/zone: "rumsk2"
+       data:
+         - objectName: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+           key: APP_POSTGRESQL_PG_1_MIGRATION_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_1_MIGRATION_USER
+           key: APP_POSTGRESQL_PG_1_MIGRATION_USER
+         - objectName: APP_POSTGRESQL_PG_1_PASSWORD
+           key: APP_POSTGRESQL_PG_1_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_1_USER
+           key: APP_POSTGRESQL_PG_1_USER
+         - objectName: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+           key: APP_POSTGRESQL_PG_2_MIGRATION_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_2_MIGRATION_USER
+           key: APP_POSTGRESQL_PG_2_MIGRATION_USER
+         - objectName: APP_POSTGRESQL_PG_2_PASSWORD
+           key: APP_POSTGRESQL_PG_2_PASSWORD
+         - objectName: APP_POSTGRESQL_PG_2_USER
+           key: APP_POSTGRESQL_PG_2_USER
+         - objectName: TRAVEL_INS_BASIC_AUTH_LOGIN
+           key: TRAVEL_INS_BASIC_AUTH_LOGIN
+         - objectName: TRAVEL_INS_BASIC_AUTH_PASSWORD
+           key: TRAVEL_INS_BASIC_AUTH_PASSWORD
+         - objectName: TRAVEL_INS_TOKEN_AUTH_LOGIN
+           key: TRAVEL_INS_TOKEN_AUTH_LOGIN
+         - objectName: TRAVEL_INS_TOKEN_AUTH_PASSWORD
+           key: TRAVEL_INS_TOKEN_AUTH_PASSWORD
Comparing release=owf-ms-prd-insurance, chart=rshb-charts/raw
Listing releases matching ^pjob-owf-ms-prd-insurance$
Listing releases matching ^exsvc-owf-ms-prd-insurance$
Listing releases matching ^data-owf-ms-prd-insurance$
Listing releases matching ^assets-config-owf-ms-prd-insurance$
Listing releases matching ^owf-ms-prd-insurance-raw$
Upgrading release=owf-ms-prd-insurance-rumsk1, chart=rshb-charts/base
Upgrading release=owf-ms-prd-insurance-rumsk2, chart=rshb-charts/base
FAILED RELEASES:
NAME
owf-ms-prd-insurance-rumsk1
owf-ms-prd-insurance-rumsk2
in deploy/helmfile.yaml: 2 errors:
err 0: failed processing release owf-ms-prd-insurance-rumsk1: command "/usr/local/link/helm" exited with non-zero status:
PATH:
  /usr/local/link/helm
ARGS:
  0: helm (4 bytes)
  1: --kube-context (14 bytes)
  2: rcsdstbl (8 bytes)
  3: upgrade (7 bytes)
  4: --install (9 bytes)
  5: --reset-values (14 bytes)
  6: owf-ms-prd-insurance-rumsk1 (27 bytes)
  7: rshb-charts/base (16 bytes)
  8: --version (9 bytes)
  9: 1.15.2 (6 bytes)
  10: --wait (6 bytes)
  11: --timeout (9 bytes)
  12: 600s (4 bytes)
  13: --atomic (8 bytes)
  14: --kube-context (14 bytes)
  15: rcsdstbl (8 bytes)
  16: --namespace (11 bytes)
  17: isys-ownfin-stress (18 bytes)
  18: --values (8 bytes)
  19: /tmp/helmfile2813557719/isys-ownfin-stress-owf-ms-prd-insurance-rumsk1-values-5c9ff67569 (88 bytes)
  20: --values (8 bytes)
  21: /tmp/helmfile789325976/isys-ownfin-stress-owf-ms-prd-insurance-rumsk1-values-7b7b474f75 (87 bytes)
  22: --values (8 bytes)
  23: /tmp/helmfile1133214926/isys-ownfin-stress-owf-ms-prd-insurance-rumsk1-values-68b48fff97 (88 bytes)
  24: --set (5 bytes)
  25: additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance/-/pipelines/3273926 (151 bytes)
  26: --set (5 bytes)
  27: additionalWorkloadAnnotations.gitlabCommit=cbfddfe93e9eb0cade16c99355243844d0caaf91 (83 bytes)
  28: --history-max (13 bytes)
  29: 10 (2 bytes)
ERROR:
  exit status 1
EXIT STATUS
  1
STDERR:
  Error: UPGRADE FAILED: another operation (install/upgrade/rollback) is in progress
COMBINED OUTPUT:
  Error: UPGRADE FAILED: another operation (install/upgrade/rollback) is in progress
err 1: failed processing release owf-ms-prd-insurance-rumsk2: command "/usr/local/link/helm" exited with non-zero status:
PATH:
  /usr/local/link/helm
ARGS:
  0: helm (4 bytes)
  1: --kube-context (14 bytes)
  2: rcsdstbl (8 bytes)
  3: upgrade (7 bytes)
  4: --install (9 bytes)
  5: --reset-values (14 bytes)
  6: owf-ms-prd-insurance-rumsk2 (27 bytes)
  7: rshb-charts/base (16 bytes)
  8: --version (9 bytes)
  9: 1.15.2 (6 bytes)
  10: --wait (6 bytes)
  11: --timeout (9 bytes)
  12: 600s (4 bytes)
  13: --atomic (8 bytes)
  14: --kube-context (14 bytes)
  15: rcsdstbl (8 bytes)
  16: --namespace (11 bytes)
  17: isys-ownfin-stress (18 bytes)
  18: --values (8 bytes)
  19: /tmp/helmfile472541345/isys-ownfin-stress-owf-ms-prd-insurance-rumsk2-values-5ffc6dcd7d (87 bytes)
  20: --values (8 bytes)
  21: /tmp/helmfile4183155654/isys-ownfin-stress-owf-ms-prd-insurance-rumsk2-values-77c5948f8d (88 bytes)
  22: --values (8 bytes)
  23: /tmp/helmfile986053801/isys-ownfin-stress-owf-ms-prd-insurance-rumsk2-values-75bdf5fd86 (87 bytes)
  24: --set (5 bytes)
  25: additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance/-/pipelines/3273926 (151 bytes)
  26: --set (5 bytes)
  27: additionalWorkloadAnnotations.gitlabCommit=cbfddfe93e9eb0cade16c99355243844d0caaf91 (83 bytes)
  28: --history-max (13 bytes)
  29: 10 (2 bytes)
ERROR:
  exit status 1
EXIT STATUS
  1
STDERR:
  Error: UPGRADE FAILED: another operation (install/upgrade/rollback) is in progress
COMBINED OUTPUT:
  Error: UPGRADE FAILED: another operation (install/upgrade/rollback) is in progress
Uploading artifacts for failed job
00:02
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories 
Uploading artifacts as "dotenv" to coordinator... 201 Created  id=22823425 responseStatus=201 Created token=64_Jdrhw
Cleaning up project directory and file based variables
00:00
ERROR: Job failed: command terminated with exit code 1