https://pastein.ru/t/xLT
Загрузка данных
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl -n isys-myinvestment-dev get pods -l app=assignment-registry -o wide
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
assignment-registry-575df7dcbf-rdpxf 2/2 Running 0 6d2h 100.68.147.242 afs1app-wl-103 <none> <none>
assignment-registry-844cdc8dc8-tbkk2 1/2 CrashLoopBackOff 8 (3m25s ago) 24m 100.68.139.41 afs1app-wl-176 <none> <none>
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl -n isys-myinvestment-dev rollout status deployment/assignment-registry --timeout=2m
error: deployment "assignment-registry" exceeded its progress deadline
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl -n isys-myinvestment-dev get deployment assignment-registry
NAME READY UP-TO-DATE AVAILABLE AGE
assignment-registry 1/1 1 1 56d
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl -n isys-myinvestment-dev get rs -l app=assignment-registry
NAME DESIRED CURRENT READY AGE
assignment-registry-575df7dcbf 1 1 1 6d2h
assignment-registry-5c94bfc8b8 0 0 0 153m
assignment-registry-676bd9997c 0 0 0 21d
assignment-registry-687b65b699 0 0 0 21d
assignment-registry-689b869db 0 0 0 21d
assignment-registry-6ccb5fb6f4 0 0 0 22d
assignment-registry-6dd6dff755 0 0 0 20d
assignment-registry-7cc9b5d66b 0 0 0 33d
assignment-registry-844cdc8dc8 1 1 0 59m
assignment-registry-c95ccf9bd 0 0 0 34d
assignment-registry-dcf7896b6 0 0 0 29d
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl -n isys-myinvestment-dev describe deployment assignment-registry
Name: assignment-registry
Namespace: isys-myinvestment-dev
CreationTimestamp: Tue, 02 Jun 2026 15:58:18 +0300
Labels: app=assignment-registry
app.kubernetes.io/managed-by=Helm
chart=base-1.15.2
fullname=assignment-registry
heritage=Helm
isys=myinvestment-dev
psvc=assignment-registry
release=assignment-registry
version=master
workload.topology.app.farm/zone=rumsk1
Annotations: deployment.kubernetes.io/revision: 23
gitlabCommit: c2b472616b29f7702342d13f279e62676cf72c62
gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/it-invest/backoffice/myinvestment/assignment-registry/-/pipelines/3382807
meta.helm.sh/release-name: assignment-registry
meta.helm.sh/release-namespace: isys-myinvestment-dev
platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: c2b47261
platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: 3382807
Selector: app=assignment-registry,fullname=assignment-registry,release=assignment-registry
Replicas: 1 desired | 1 updated | 2 total | 1 available | 1 unavailable
StrategyType: RollingUpdate
MinReadySeconds: 0
RollingUpdateStrategy: 25% max unavailable, 25% max surge
Pod Template:
Labels: app=assignment-registry
chart=base-1.15.2
fullname=assignment-registry
heritage=Helm
isys=myinvestment-dev
psvc=assignment-registry
release=assignment-registry
version=master
workload.topology.app.farm/zone=rumsk1
Annotations: checksum/configMapsEnv: 79b3166ed64c64cd8c0893f84c150aa24ec012c04f87e745c7b68d27588c1366
checksum/secretEnv: b825958b1118c0d436da798fdecfc8d2315897a87f02e049ac69292bf6253868
ci/commithash: c2b47261
inject.istio.io/templates: sidecar,custom
prometheus.io/path: /metrics
prometheus.io/port: 9080
prometheus.io/scrape: true
sidecar.istio.io/userVolume: [{"name": "wasmfilters-dir","configMap": {"name": "myinvestment-dev-envoy-filters"}}]
sidecar.istio.io/userVolumeMount: [{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]
Service Account: default
Containers:
app:
Image: registry.rshbdev.ru/rshbintech/it-invest/backoffice/myinvestment/assignment-registry:master
Port: <none>
Host Port: <none>
Limits:
cpu: 500m
memory: 1Gi
Requests:
cpu: 500m
memory: 1Gi
Liveness: http-get http://:9080/health/liveness delay=30s timeout=1s period=5s #success=1 #failure=5
Readiness: http-get http://:9080/health/readiness delay=15s timeout=1s period=5s #success=1 #failure=3
Environment Variables from:
assignment-registry-app-cm-env ConfigMap Optional: false
assignment-registry-app-secret-env Secret Optional: false
Environment: <none>
Mounts:
/secrets from app-vault-secrets (ro)
Volumes:
app-vault-secrets:
Type: CSI (a Container Storage Interface (CSI) volume source)
Driver: secrets-store.csi.k8s.io
FSType:
ReadOnly: true
VolumeAttributes: secretProviderClass=assignment-registry-app-secret-provider
Priority Class Name: rumsk1
Node-Selectors: workload.topology.app.farm/zone=rumsk1
Tolerations: workload.topology.app.farm/zone:NoSchedule op=Exists
Conditions:
Type Status Reason
---- ------ ------
Available True MinimumReplicasAvailable
Progressing False ProgressDeadlineExceeded
OldReplicaSets: assignment-registry-c95ccf9bd (0/0 replicas created), assignment-registry-7cc9b5d66b (0/0 replicas created), assignment-registry-dcf7896b6 (0/0 replicas created), assignment-registry-6ccb5fb6f4 (0/0 replicas created), assignment-registry-676bd9997c (0/0 replicas created), assignment-registry-687b65b699 (0/0 replicas created), assignment-registry-689b869db (0/0 replicas created), assignment-registry-6dd6dff755 (0/0 replicas created), assignment-registry-575df7dcbf (1/1 replicas created), assignment-registry-5c94bfc8b8 (0/0 replicas created)
NewReplicaSet: assignment-registry-844cdc8dc8 (1/1 replicas created)
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal ScalingReplicaSet 49m deployment-controller Scaled down replica set assignment-registry-844cdc8dc8 to 0
Normal ScalingReplicaSet 24m (x2 over 59m) deployment-controller Scaled up replica set assignment-registry-844cdc8dc8 to 1
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$
Running with gitlab-runner 15.8.0 (12335144)
on gitlab-runner-gitlab-runner-64775b4cff-qpdc8 9cgwHtm5, system ID: r_FsAm41LqwxCr
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.11 ...
Using attach strategy to execute scripts...
Preparing environment
00:06
Waiting for pod gitlab-runners/runner-9cgwhtm5-project-85687-concurrent-08bjvh to be running, status is Pending
Waiting for pod gitlab-runners/runner-9cgwhtm5-project-85687-concurrent-08bjvh to be running, status is Pending
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-9cgwhtm5-project-85687-concurrent-08bjvh via gitlab-runner-gitlab-runner-64775b4cff-qpdc8...
Getting source from Git repository
00:02
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/it-invest/backoffice/myinvestment/assignment-registry/.git/
Created fresh repository.
Checking out c2b47261 as master...
Skipping Git submodules setup
Downloading artifacts
00:02
Downloading artifacts for devsecops_antivirus_scan (23566116)...
Downloading artifacts from coordinator... ok id=23566116 responseStatus=200 OK token=64_ywuya
Downloading artifacts for dockerfilegen (23566120)...
Downloading artifacts from coordinator... ok id=23566120 responseStatus=200 OK token=64_ywuya
Downloading artifacts for build (23566124)...
Downloading artifacts from coordinator... ok id=23566124 responseStatus=200 OK token=64_ywuya
Downloading artifacts for unit (23566126)...
Downloading artifacts from coordinator... ok id=23566126 responseStatus=200 OK token=64_ywuya
Executing "step_script" stage of the job script
00:27
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: devstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=devstbl
++ CLUSTER=devstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ dev = production ]]
++ export NAMESPACE=isys-myinvestment-dev
++ NAMESPACE=isys-myinvestment-dev
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context devstbl -n isys-myinvestment-dev history assignment-registry
+++ tail -1
+++ cut -f1,3
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ pending-upgrade =~ pending ]]
++ helm --kube-context devstbl -n isys-myinvestment-dev rollback assignment-registry 23
Rollback was a success! Happy Helming!
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"
++ helmfile --environment devstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/it-invest/backoffice/myinvestment/assignment-registry/-/pipelines/3382807 --set additionalWorkloadAnnotations.gitlabCommit=c2b472616b29f7702342d13f279e62676cf72c62
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/it-invest/backoffice/myinvestment/assignment-registry
no matches for path: envs/dev/devstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=vault-secrets-assignment-registry, chart=rshb-charts/raw
Comparing release=psvc-assignment-registry, chart=rshb-charts/raw
Comparing release=platform-database-assignment-registry, chart=rshb-charts/raw
Comparing release=links-assignment-registry, chart=rshb-charts/raw
Comparing release=assignment-registry, chart=rshb-charts/base
Listing releases matching ^pjob-assignment-registry$
Listing releases matching ^exsvc-assignment-registry$
Listing releases matching ^data-assignment-registry$
Listing releases matching ^assets-config-assignment-registry$
Listing releases matching ^assignment-registry-raw$
Listing releases matching ^assignment-registry-grafana-dashboard$
Listing releases matching ^assignment-registry-prometheus-rules$
Listing releases matching ^assignment-registry-rumsk1$
Listing releases matching ^assignment-registry-rumsk2$
++ echo '$ done'
$ done
Uploading artifacts for successful job
00:03
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories
Uploading artifacts as "dotenv" to coordinator... 201 Created id=23569783 responseStatus=201 Created token=64_ywuya
Cleaning up project directory and file based variables
00:01
Job succeeded