https://pastein.ru/t/rOp
Загрузка данных
Running with gitlab-runner 15.8.0 (12335144)
on gitlab-runner-gitlab-runner-695bb55d66-jxll4 JJaR6g8V, system ID: r_34sswAxTYh8f
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.16 ...
Using attach strategy to execute scripts...
Preparing environment
00:08
Waiting for pod gitlab-runners/runner-jjar6g8v-project-89129-concurrent-0482zt to be running, status is Pending
Waiting for pod gitlab-runners/runner-jjar6g8v-project-89129-concurrent-0482zt to be running, status is Pending
ContainersNotInitialized: "containers with incomplete status: [init-permissions]"
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Waiting for pod gitlab-runners/runner-jjar6g8v-project-89129-concurrent-0482zt to be running, status is Pending
ContainersNotInitialized: "containers with incomplete status: [init-permissions]"
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-jjar6g8v-project-89129-concurrent-0482zt via gitlab-runner-gitlab-runner-695bb55d66-jxll4...
Getting source from Git repository
00:01
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/abs/banking-accounting/aml/csm/.git/
Created fresh repository.
Checking out 78fbedb0 as master...
Skipping Git submodules setup
Downloading artifacts
00:01
Downloading artifacts for dockerfilegen (24325166)...
Downloading artifacts from coordinator... ok id=24325166 responseStatus=200 OK token=64_xssgS
Downloading artifacts for devsecops_antivirus_scan (24325162)...
Downloading artifacts from coordinator... ok id=24325162 responseStatus=200 OK token=64_xssgS
Executing "step_script" stage of the job script
10:28
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: devstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=devstbl
++ CLUSTER=devstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ dev = production ]]
++ export NAMESPACE=isys-aml-dev
++ NAMESPACE=isys-aml-dev
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context devstbl -n isys-aml-dev history csm
+++ tail -1
+++ cut -f1,3
Error: release: not found
++ true
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ '' =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"
++ helmfile --environment devstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/abs/banking-accounting/aml/csm/-/pipelines/3494270 --set additionalWorkloadAnnotations.gitlabCommit=78fbedb06968f67883016afe2e7cbcf14e5494f5
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/abs/banking-accounting/aml/csm
no matches for path: envs/dev/devstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=vault-secrets-csm, chart=rshb-charts/raw
Comparing release=psvc-csm, chart=rshb-charts/raw
isys-aml-dev, csm, PlatformService (production.platform.ckpr.integrations.rshbintech.ru) has changed:
# Source: raw/templates/resources.yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: PlatformService
metadata:
annotations:
ci.build.image.app.farm/version: 3.9.12-eclipse-temurin-17-rshb.0.2.0
ci.runtime.image.app.farm/version: 17.0.17_10-jre-jammy-rshb.1.1.0
labels:
app: raw
chart: raw-0.2.3-rshb.1.0.0
ci.build.image.app.farm/name: maven-legacy
ci.kubeclientapps.app.farm/version: 8.21.16
ci.runtime.image.app.farm/name: jre-legacy
ci.service.app.farm/lang: java
ci.service.app.farm/side: backend
- commitShortSHA: d9788e35
+ commitShortSHA: 78fbedb0
heritage: Helm
release: psvc-csm
version: master
name: csm
spec:
cpuLimits: 512m
cpuRequests: 256m
description: Сервис проверки по спискам - csm
environment: DEV
informationSystemId: aml-dev
name: Сервис проверки по спискам - csm
projectPath: /rshbintech/abs/banking-accounting/aml/csm
publicDomain: csm
ramLimits: 512Mi
ramRequests: 128Mi
replicaCount: 1
serviceReference:
name: csm
namespace: isys-aml-dev
side: backend
updateStrategy: RollingUpdate
Comparing release=platform-database-csm, chart=rshb-charts/raw
Comparing release=links-csm, chart=rshb-charts/raw
********************
Release was not present in Helm. Diff will show entire contents as new.
********************
isys-aml-dev, csm.to.aml-kafka-int-error-channel.14063b09caa4, KafkaLinkDefinition (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: KafkaLinkDefinition
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.16
+ heritage: Helm
+ release: links-csm
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: error-channel
+ name: csm.to.aml-kafka-int-error-channel.14063b09caa4
+ spec:
+ environment: DEV
+ id: 14063b09caa4
+ kafkaAdapterProperties:
+ connectionMode: producer
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: error-channel
isys-aml-dev, csm.to.aml-kafka-int-kyc-casecreation-case.2b170d0dec72, KafkaLinkDefinition (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: KafkaLinkDefinition
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.16
+ heritage: Helm
+ release: links-csm
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: kyc_casecreation_case
+ name: csm.to.aml-kafka-int-kyc-casecreation-case.2b170d0dec72
+ spec:
+ environment: DEV
+ id: 2b170d0dec72
+ kafkaAdapterProperties:
+ connectionMode: producer
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: kyc_casecreation_case
isys-aml-dev, csm.to.aml-kafka-int-kyc-casecreation.5119b28f2b39, KafkaLinkDefinition (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: KafkaLinkDefinition
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.16
+ heritage: Helm
+ release: links-csm
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: kyc_casecreation
+ name: csm.to.aml-kafka-int-kyc-casecreation.5119b28f2b39
+ spec:
+ environment: DEV
+ id: 5119b28f2b39
+ kafkaAdapterProperties:
+ connectionMode: producer
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: kyc_casecreation
isys-aml-dev, csm.to.aml-kafka-int-potentialclient-checkpassport-req.7e2832249075, KafkaLinkDefinition (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: KafkaLinkDefinition
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.16
+ heritage: Helm
+ release: links-csm
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: potentialClient-checkPassport-req
+ name: csm.to.aml-kafka-int-potentialclient-checkpassport-req.7e2832249075
+ spec:
+ environment: DEV
+ id: 7e2832249075
+ kafkaAdapterProperties:
+ connectionMode: producer
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: potentialClient-checkPassport-req
isys-aml-dev, csm.to.aml-kafka-int-potentialclient-enrichment-req.c9966655f486, KafkaLinkDefinition (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: KafkaLinkDefinition
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.16
+ heritage: Helm
+ release: links-csm
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: potentialClient-enrichment-req
+ name: csm.to.aml-kafka-int-potentialclient-enrichment-req.c9966655f486
+ spec:
+ environment: DEV
+ id: c9966655f486
+ kafkaAdapterProperties:
+ connectionMode: consumer
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: potentialClient-enrichment-req
isys-aml-dev, csm.to.aml-kafka-int-so-enrichment-in.dbafd1e200e5, KafkaLinkDefinition (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: KafkaLinkDefinition
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.16
+ heritage: Helm
+ release: links-csm
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: so-enrichment-in
+ name: csm.to.aml-kafka-int-so-enrichment-in.dbafd1e200e5
+ spec:
+ environment: DEV
+ id: dbafd1e200e5
+ kafkaAdapterProperties:
+ connectionMode: producer
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: so-enrichment-in
isys-aml-dev, csm.to.aml-kafka-int-transport-req-clients.8e7cb8a936b5, KafkaLinkDefinition (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: KafkaLinkDefinition
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.16
+ heritage: Helm
+ release: links-csm
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: transport-req-clients
+ name: csm.to.aml-kafka-int-transport-req-clients.8e7cb8a936b5
+ spec:
+ environment: DEV
+ id: 8e7cb8a936b5
+ kafkaAdapterProperties:
+ connectionMode: consumer
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: transport-req-clients
isys-aml-dev, csm.to.aml-kafka-int-transport-req-payment.ebaaeaae58ae, KafkaLinkDefinition (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: KafkaLinkDefinition
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.16
+ heritage: Helm
+ release: links-csm
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: transport-req-payment
+ name: csm.to.aml-kafka-int-transport-req-payment.ebaaeaae58ae
+ spec:
+ environment: DEV
+ id: ebaaeaae58ae
+ kafkaAdapterProperties:
+ connectionMode: consumer
+ sourceInformationSystemId: aml-dev
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetKafkaClusterId: aml-kafka-int
+ targetKafkaTopicName: transport-req-payment
isys-aml-dev, csm.to.fnsloader.c31704dc4038, LinkDefinition (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: LinkDefinition
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.16
+ heritage: Helm
+ release: links-csm
+ sourceInformationSystemId: aml-dev
+ sourceProtocol: HTTP
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetProtocol: HTTP
+ targetServiceId: fnsloader
+ name: csm.to.fnsloader.c31704dc4038
+ spec:
+ enabled: true
+ environment: DEV
+ id: c31704dc4038
+ sourceInformationSystemId: aml-dev
+ sourceParameters: {}
+ sourceProtocol: HTTP
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetProtocol: HTTP
+ targetServiceId: fnsloader
isys-aml-dev, csm.to.pipeline-schedulingmanager.6eea9008dfba, LinkDefinition (production.platform.ckpr.integrations.rshbintech.ru) has been added:
-
+ # Source: raw/templates/resources.yaml
+ apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
+ kind: LinkDefinition
+ metadata:
+ labels:
+ app: raw
+ chart: raw-0.2.3-rshb.1.0.0
+ ci.kubeclientapps.app.farm/version: 8.21.16
+ heritage: Helm
+ release: links-csm
+ sourceInformationSystemId: aml-dev
+ sourceProtocol: HTTP
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetProtocol: HTTP
+ targetServiceId: pipeline-schedulingmanager
+ name: csm.to.pipeline-schedulingmanager.6eea9008dfba
+ spec:
+ enabled: true
+ environment: DEV
+ id: 6eea9008dfba
+ sourceInformationSystemId: aml-dev
+ sourceParameters: {}
+ sourceProtocol: HTTP
+ sourceServiceId: csm
+ targetInformationSystemId: aml-dev
+ targetProtocol: HTTP
+ targetServiceId: pipeline-schedulingmanager
Comparing release=csm, chart=rshb-charts/base
********************
Release was not present in Helm. Diff will show entire contents as new.
********************
isys-aml-dev, csm, Deployment (apps) has been added:
-
+ # Source: base/templates/workload.yaml
+ apiVersion: apps/v1
+ kind: Deployment
+ metadata:
+ name: csm
+ labels:
+ app: csm
+ fullname: csm
+ chart: base-1.15.3
+ release: csm
+ heritage: Helm
+ isys: "aml-dev"
+ psvc: "csm"
+ version: "master"
+ workload.topology.app.farm/zone: "rumsk1"
+ annotations:
+ gitlabCommit: 78fbedb06968f67883016afe2e7cbcf14e5494f5
+ gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/abs/banking-accounting/aml/csm/-/pipelines/3494270
+ platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 78fbedb0
+ platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3494270"
+ spec:
+ strategy:
+ type: RollingUpdate
+ replicas: 1
+ selector:
+ matchLabels:
+ app: csm
+ fullname: csm
+ release: csm
+ template:
+ metadata:
+ labels:
+ app: csm
+ fullname: csm
+ chart: base-1.15.3
+ release: csm
+ heritage: Helm
+ isys: "aml-dev"
+ psvc: "csm"
+ version: "master"
+ workload.topology.app.farm/zone: "rumsk1"
+ annotations:
+ checksum/configMapsEnv: "e50216205338ac34e5f8cdb5fcdc5738495f70007385e27fda22994e374f1599"
+ checksum/secretEnv: "dd10630e48d1ca3f2b4c77cbda4009852889adca4ac5c88e7e9b5f799ac4cdd4"
+ ci/commithash: "78fbedb0"
+ inject.istio.io/templates: "sidecar,custom"
+ prometheus.io/path: "/metrics"
+ prometheus.io/port: "8080"
+ prometheus.io/scrape: "true"
+ sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"aml-dev-envoy-filters\"}}]"
+ sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
+ spec:
+ automountServiceAccountToken: false
+ serviceAccountName: default
+ nodeSelector:
+ workload.topology.app.farm/zone: rumsk1
+ priorityClassName: rumsk1
+ containers:
+ - name: app
+ image: registry.rshbdev.ru/rshbintech/abs/banking-accounting/aml/csm:master
+ imagePullPolicy: Always
+ envFrom:
+ - configMapRef:
+ name: csm-app-cm-env
+ - secretRef:
+ name: csm-app-secret-env
+ resources:
+ limits:
+ cpu: 512m
+ memory: 512Mi
+ requests:
+ cpu: 256m
+ memory: 128Mi
+ ports:
+ livenessProbe:
+ failureThreshold: 5
+ httpGet:
+ path: /health/liveness
+ port: 8080
+ initialDelaySeconds: 180
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ readinessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /health/readiness
+ port: 8080
+ initialDelaySeconds: 180
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 1
+ volumeMounts:
+ - name: app-vault-secrets
+ mountPath: /secrets
+ readOnly: true
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
+ procMount: Default
+ readOnlyRootFilesystem: false
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ securityContext:
+ fsGroup: 1001
+ fsGroupChangePolicy: OnRootMismatch
+ runAsGroup: 1001
+ runAsNonRoot: true
+ runAsUser: 1001
+ tolerations:
+ - effect: NoSchedule
+ key: workload.topology.app.farm/zone
+ operator: Exists
+ hostNetwork: false
+ volumes:
+ - name: app-vault-secrets
+ csi:
+ driver: secrets-store.csi.k8s.io
+ readOnly: true
+ volumeAttributes:
+ secretProviderClass: csm-app-secret-provider
isys-aml-dev, csm, Service (v1) has been added:
-
+ # Source: base/templates/svc.yaml
+ apiVersion: v1
+ kind: Service
+ metadata:
+ name: csm
+ labels:
+ app: csm
+ fullname: csm
+ chart: base-1.15.3
+ release: csm
+ heritage: Helm
+ isys: "aml-dev"
+ psvc: "csm"
+ version: "master"
+ spec:
+ ports:
+ - name: web
+ port: 80
+ protocol: TCP
+ targetPort: 8080
+ selector:
+ app: csm
+ fullname: csm
+ release: csm
+ type: ClusterIP
isys-aml-dev, csm-app-cm-env, ConfigMap (v1) has been added:
-
+ # Source: base/templates/cm-env.yaml
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ name: csm-app-cm-env
+ labels:
+ app: csm
+ fullname: csm
+ chart: base-1.15.3
+ release: csm
+ heritage: Helm
+ isys: "aml-dev"
+ psvc: "csm"
+ version: "master"
+ workload.topology.app.farm/zone: "rumsk1"
+ data:
+ APP_POSTGRESQL_HOST: "10.7.79.5"
+ APP_POSTGRESQL_NAME: "dev-aml-arng01"
+ APP_POSTGRESQL_PORT: "5432"
+ ARANGO_HOST: "10.7.79.5:5432"
+ ARANGO_MIN_REPLICATION_FACTOR: "1"
+ ARANGO_REPLICATION_FACTOR: "1"
+ ARANGO_USERNAME: "root"
+ CLIENT_RESPONSE_DELAY_MS: "0"
+ JAVA_OPTS: "-XX:+PrintFlagsFinal -XX:MaxRAMPercentage=75.0 -XX:MinRAMPercentage=75.0 -XX:+UseTransparentHugePages"
+ KAFKA_BROKERS: "adapter-aml-aml-kafka-int.isys-aml-dev-links:9092"
+ KAFKA_ERROR_TOPICS: "error-channel"
+ KAFKA_GROUP: "Kyc"
+ KAFKA_INPUT_CONSUMER_CONCURRENCY: "5"
+ KAFKA_INPUT_TOPICS: "transport-req-clients,transport-req-payment"
+ KAFKA_MAX_POLL_INTERVAL: "600000"
+ KAFKA_MAX_POLL_RECORDS: "20"
+ KAFKA_OUTPUT_OFFLINE_TOPICS: "kyc_casecreation"
+ KAFKA_OUTPUT_OPERATION_TOPICS: "kyc_casecreation"
+ KAFKA_OUTPUT_TOPICS: "kyc_casecreation_case"
+ KAFKA_POTENTIAL_INPUT_TOPIC: "potentialClient-enrichment-req"
+ KAFKA_POTENTIAL_OUTPUT_TOPIC: "potentialClient-checkPassport-req"
+ KAFKA_SECURITY_PROTOCOL: "plaintext"
+ KAFKA_SHORT_CLIENT_RESPONSE_OUTPUT_TOPIC: "so-enrichment-in"
+ KAFKA_SHORT_RESPONSE_OUTPUT_TOPIC: "so-enrichment-in"
+ KAFKA_SSL_KEYSTORE_LOCATION: ""
+ KAFKA_SSL_KEYSTORE_PASSWORD: ""
+ KAFKA_SSL_KEYSTORE_TYPE: "jks"
+ KAFKA_SSL_TRUSTSTORE_LOCATION: ""
+ KAFKA_SSL_TRUSTSTORE_PASSWORD: ""
+ LOG_LEVEL: "INFO"
+ LOG_LEVEL_SPRING: "INFO"
+ OPERATION_RESPONSE_DELAY_MS: "0"
+ SEND_SHORT_CLIENT_RESPONSE: "false"
+ SEND_SHORT_RESPONSE: "true"
+ SERVER_PORT: "8080"
+ SERVICE_NAME: "csm"
isys-aml-dev, csm-app-secret-env, Secret (v1) has been added:
+ Changes suppressed on sensitive content of type Secret
isys-aml-dev, csm-app-secret-provider, SecretProviderClass (secrets-store.csi.x-k8s.io) has been added:
-
+ # Source: base/templates/secret-provider.yaml
+ apiVersion: secrets-store.csi.x-k8s.io/v1
+ kind: SecretProviderClass
+ metadata:
+ name: csm-app-secret-provider
+ labels:
+ app: csm
+ fullname: csm
+ chart: base-1.15.3
+ release: csm
+ heritage: Helm
+ isys: "aml-dev"
+ psvc: "csm"
+ version: "master"
+ workload.topology.app.farm/zone: "rumsk1"
+ spec:
+ provider: vault
+ parameters:
+ vaultKubernetesMountPath: devstbl-secrets-store
+ roleName: "csi-secrets-reader-dev"
+ objects: |
+ - objectName: APP_POSTGRESQL_PASSWORD
+ secretPath: manual_kv_dev/data/rshbintech/abs/banking-accounting/aml/csm
+ secretKey: APP_POSTGRESQL_PASSWORD
+ - objectName: APP_POSTGRESQL_USER
+ secretPath: manual_kv_dev/data/rshbintech/abs/banking-accounting/aml/csm
+ secretKey: APP_POSTGRESQL_USER
+ - objectName: ARANGO_PASSWORD
+ secretPath: manual_kv_dev/data/rshbintech/abs/banking-accounting/aml/csm
+ secretKey: ARANGO_PASSWORD
+ secretObjects:
+ - secretName: csm-app-secret-env
+ type: Opaque
+ labels:
+ app: csm
+ fullname: csm
+ chart: base-1.15.3
+ release: csm
+ heritage: Helm
+ isys: "aml-dev"
+ psvc: "csm"
+ version: "master"
+ workload.topology.app.farm/zone: "rumsk1"
+ data:
+ - objectName: APP_POSTGRESQL_PASSWORD
+ key: APP_POSTGRESQL_PASSWORD
+ - objectName: APP_POSTGRESQL_USER
+ key: APP_POSTGRESQL_USER
+ - objectName: ARANGO_PASSWORD
+ key: ARANGO_PASSWORD
Listing releases matching ^pjob-csm$
Listing releases matching ^exsvc-csm$
Listing releases matching ^data-csm$
Listing releases matching ^assets-config-csm$
Listing releases matching ^csm-raw$
Listing releases matching ^csm-grafana-dashboard$
Listing releases matching ^csm-prometheus-rules$
Listing releases matching ^csm-rumsk1$
Listing releases matching ^csm-rumsk2$
Upgrading release=links-csm, chart=rshb-charts/raw
Upgrading release=psvc-csm, chart=rshb-charts/raw
Release "psvc-csm" has been upgraded. Happy Helming!
NAME: psvc-csm
LAST DEPLOYED: Mon Aug 31 11:56:46 2026
NAMESPACE: isys-aml-dev
STATUS: deployed
REVISION: 2
TEST SUITE: None
Listing releases matching ^psvc-csm$
Release "links-csm" does not exist. Installing it now.
NAME: links-csm
LAST DEPLOYED: Mon Aug 31 11:56:46 2026
NAMESPACE: isys-aml-dev
STATUS: deployed
REVISION: 1
TEST SUITE: None
Listing releases matching ^links-csm$
psvc-csm isys-aml-dev 2 2026-08-31 11:56:46.18091298 +0000 UTC deployed raw-0.2.3-rshb.1.0.0 0.2.3
links-csm isys-aml-dev 1 2026-08-31 11:56:46.201807013 +0000 UTC deployed raw-0.2.3-rshb.1.0.0 0.2.3
Upgrading release=csm, chart=rshb-charts/base
Release "csm" does not exist. Installing it now.
UPDATED RELEASES:
NAME CHART VERSION
psvc-csm rshb-charts/raw 0.2.3-rshb.1.0.0
links-csm rshb-charts/raw 0.2.3-rshb.1.0.0
FAILED RELEASES:
NAME
csm
in deploy/helmfile.yaml: failed processing release csm: command "/usr/local/link/helm" exited with non-zero status:
PATH:
/usr/local/link/helm
ARGS:
0: helm (4 bytes)
1: --kube-context (14 bytes)
2: devstbl (7 bytes)
3: upgrade (7 bytes)
4: --install (9 bytes)
5: --reset-values (14 bytes)
6: csm (3 bytes)
7: rshb-charts/base (16 bytes)
8: --version (9 bytes)
9: 1.15.3 (6 bytes)
10: --wait (6 bytes)
11: --timeout (9 bytes)
12: 600s (4 bytes)
13: --atomic (8 bytes)
14: --kube-context (14 bytes)
15: devstbl (7 bytes)
16: --namespace (11 bytes)
17: isys-aml-dev (12 bytes)
18: --values (8 bytes)
19: /tmp/helmfile3203835534/isys-aml-dev-csm-values-656b47cc8b (58 bytes)
20: --values (8 bytes)
21: /tmp/helmfile1372034831/isys-aml-dev-csm-values-686df45fd (57 bytes)
22: --set (5 bytes)
23: additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/abs/banking-accounting/aml/csm/-/pipelines/3494270 (132 bytes)
24: --set (5 bytes)
25: additionalWorkloadAnnotations.gitlabCommit=78fbedb06968f67883016afe2e7cbcf14e5494f5 (83 bytes)
26: --history-max (13 bytes)
27: 10 (2 bytes)
ERROR:
exit status 1
EXIT STATUS
1
STDERR:
Error: release csm failed, and has been uninstalled due to atomic being set: timed out waiting for the condition
COMBINED OUTPUT:
Release "csm" does not exist. Installing it now.
Error: release csm failed, and has been uninstalled due to atomic being set: timed out waiting for the condition
Uploading artifacts for failed job
00:01
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories
Uploading artifacts as "dotenv" to coordinator... 201 Created id=24325177 responseStatus=201 Created token=64_xssgS
Cleaning up project directory and file based variables
00:00
ERROR: Job failed: command terminated with exit code 1