https://pastein.ru/t/xgh
Загрузка данных
Running with gitlab-runner 15.8.0 (12335144)
on gitlab-runner-gitlab-runner-5c5d8dfd84-fc2jj x3T1Qxkg, system ID: r_0t1aE5p8nfLN
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.3 ...
Using attach strategy to execute scripts...
Preparing environment
00:05
Waiting for pod gitlab-runners/runner-x3t1qxkg-project-82319-concurrent-0lkljh to be running, status is Pending
Waiting for pod gitlab-runners/runner-x3t1qxkg-project-82319-concurrent-0lkljh to be running, status is Pending
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-x3t1qxkg-project-82319-concurrent-0lkljh via gitlab-runner-gitlab-runner-5c5d8dfd84-fc2jj...
Getting source from Git repository
00:02
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/it-invest/backoffice/myinvestment/finmarkets/stock-market/equities-enrichment-service/.git/
Created fresh repository.
Checking out 3c686f93 as 1.2.0-RC1...
Skipping Git submodules setup
Downloading artifacts
00:02
Downloading artifacts for init_dojo (21825410)...
Downloading artifacts from coordinator... ok id=21825410 responseStatus=200 OK token=64_zdTTo
Downloading artifacts for devsecops_antivirus_scan (21825411)...
Downloading artifacts from coordinator... ok id=21825411 responseStatus=200 OK token=64_zdTTo
Downloading artifacts for secrets_gitleaks (21825412)...
Downloading artifacts from coordinator... ok id=21825412 responseStatus=200 OK token=64_zdTTo
Downloading artifacts for sast_semgrep (21825413)...
Downloading artifacts from coordinator... ok id=21825413 responseStatus=200 OK token=64_zdTTo
Downloading artifacts for sast_ptai (21825414)...
Downloading artifacts from coordinator... ok id=21825414 responseStatus=200 OK token=64_zdTTo
Downloading artifacts for dockerfilegen (21825415)...
Downloading artifacts from coordinator... ok id=21825415 responseStatus=200 OK token=64_zdTTo
Downloading artifacts for sca_scan (21825417)...
Downloading artifacts from coordinator... ok id=21825417 responseStatus=200 OK token=64_zdTTo
Downloading artifacts for build (21825419)...
Downloading artifacts from coordinator... ok id=21825419 responseStatus=200 OK token=64_zdTTo
Downloading artifacts for unit (21825421)...
Downloading artifacts from coordinator... ok id=21825421 responseStatus=200 OK token=64_zdTTo
Downloading artifacts for bca_trivy (21825424)...
Downloading artifacts from coordinator... ok id=21825424 responseStatus=200 OK token=64_zdTTo
Executing "step_script" stage of the job script
04:19
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: rcsdstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=rcsdstbl
++ CLUSTER=rcsdstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ rc = production ]]
++ export NAMESPACE=isys-myinvestment-rc
++ NAMESPACE=isys-myinvestment-rc
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context rcsdstbl -n isys-myinvestment-rc history equities-enrichment-service
+++ tail -1
+++ cut -f1,3
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ deployed =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets
++ helmfile --environment rcsdstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/it-invest/backoffice/myinvestment/finmarkets/stock-market/equities-enrichment-service
no matches for path: envs/rc/rcsdstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=psvc-equities-enrichment-service, chart=rshb-charts/raw
isys-myinvestment-rc, equities-enrichment-service, PlatformService (production.platform.ckpr.integrations.rshbintech.ru) has changed:
# Source: raw/templates/resources.yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: PlatformService
metadata:
labels:
app: raw
chart: raw-0.2.3-rshb.1.0.0
ci.build.image.app.farm/name: maven-latest
- ci.build.image.app.farm/version: 3.9.11-eclipse-temurin-25-rshb.0.1.2
- ci.kubeclientapps.app.farm/version: 8.21.1
+ ci.build.image.app.farm/version: 3.9.12-eclipse-temurin-25-rshb.0.3.0
+ ci.kubeclientapps.app.farm/version: 8.21.3
ci.runtime.image.app.farm/name: jre-latest
- ci.runtime.image.app.farm/version: 25.0.1_8-jre-noble-rshb.0.1.1
+ ci.runtime.image.app.farm/version: 25.0.1_8-jre-noble-rshb.1.1.0
ci.service.app.farm/lang: java
ci.service.app.farm/side: backend
- commitShortSHA: e5bf8524
+ commitShortSHA: 3c686f93
heritage: Helm
release: psvc-equities-enrichment-service
- version: 1.0.1-RC9
+ version: 1.2.0-RC1
name: equities-enrichment-service
spec:
cpuLimits: 500m
cpuRequests: 500m
description: Микросервис получает данные от IPS и обогащает их
environment: RC
informationSystemId: myinvestment-rc
name: Микросервис обогащения сделок и заявок фондового рынка
projectPath: /rshbintech/it-invest/backoffice/myinvestment/finmarkets/stock-market/equities-enrichment-service
publicDomain: equities-enrichment-service
publishAPI: true
ramLimits: 1Gi
ramRequests: 500Mi
replicaCount: 1
serviceReference:
name: equities-enrichment-service
namespace: isys-myinvestment-rc
side: backend
updateStrategy: Recreate
Comparing release=links-equities-enrichment-service, chart=rshb-charts/raw
Comparing release=equities-enrichment-service, chart=rshb-charts/base
isys-myinvestment-rc, equities-enrichment-service, Deployment (apps) has changed:
# Source: base/templates/workload.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: equities-enrichment-service
labels:
app: equities-enrichment-service
fullname: equities-enrichment-service
chart: base-1.14.2
release: equities-enrichment-service
heritage: Helm
isys: "myinvestment-rc"
psvc: "equities-enrichment-service"
- version: "1.0.1-RC9"
+ version: "1.2.0-RC1"
workload.topology.app.farm/zone: "rumsk1"
annotations:
- platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: e5bf8524
- platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "2854599"
+ platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 3c686f93
+ platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3131445"
spec:
strategy:
type: Recreate
replicas: 1
selector:
matchLabels:
app: equities-enrichment-service
fullname: equities-enrichment-service
release: equities-enrichment-service
template:
metadata:
labels:
app: equities-enrichment-service
fullname: equities-enrichment-service
chart: base-1.14.2
release: equities-enrichment-service
heritage: Helm
isys: "myinvestment-rc"
psvc: "equities-enrichment-service"
- version: "1.0.1-RC9"
+ version: "1.2.0-RC1"
workload.topology.app.farm/zone: "rumsk1"
annotations:
- checksum/configMapsEnv: "75e39b5a2ffca748e4abf6406d749bafbd824c307ec70c99ca7e882e585467b0"
+ checksum/configMapsEnv: "7e58f43418876bb7ba68b332264ae1d119901b57aa506016b6587975ea628e4f"
checksum/secretEnv: "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b"
inject.istio.io/templates: "sidecar,custom"
prometheus.io/path: "/metrics"
prometheus.io/port: "8080"
prometheus.io/scrape: "true"
sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"myinvestment-rc-envoy-filters\"}}]"
sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
spec:
serviceAccountName: default
nodeSelector:
workload.topology.app.farm/zone: rumsk1
priorityClassName:
rumsk1
containers:
- name: app
- image: registry.rshbdev.ru/rshbintech/it-invest/backoffice/myinvestment/finmarkets/stock-market/equities-enrichment-service:1.0.1-RC9
+ image: registry.rshbdev.ru/rshbintech/it-invest/backoffice/myinvestment/finmarkets/stock-market/equities-enrichment-service:1.2.0-RC1
imagePullPolicy: IfNotPresent
envFrom:
- configMapRef:
name: equities-enrichment-service-app-cm-env
resources:
limits:
cpu: 500m
memory: 1Gi
requests:
cpu: 500m
memory: 500Mi
ports:
livenessProbe:
failureThreshold: 5
httpGet:
path: /health/liveness
port: 8080
initialDelaySeconds: 400
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 3
readinessProbe:
failureThreshold: 5
httpGet:
path: /health/readiness
port: 8080
initialDelaySeconds: 400
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 3
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
procMount: Default
readOnlyRootFilesystem: false
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
securityContext:
fsGroup: 1001
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
tolerations:
- effect: NoSchedule
key: workload.topology.app.farm/zone
operator: Exists
hostNetwork: false
volumes:
isys-myinvestment-rc, equities-enrichment-service, Service (v1) has changed:
# Source: base/templates/svc.yaml
apiVersion: v1
kind: Service
metadata:
name: equities-enrichment-service
labels:
app: equities-enrichment-service
fullname: equities-enrichment-service
chart: base-1.14.2
release: equities-enrichment-service
heritage: Helm
isys: "myinvestment-rc"
psvc: "equities-enrichment-service"
- version: "1.0.1-RC9"
+ version: "1.2.0-RC1"
spec:
ports:
- name: web
port: 80
protocol: TCP
targetPort: 8080
selector:
app: equities-enrichment-service
fullname: equities-enrichment-service
release: equities-enrichment-service
type: ClusterIP
isys-myinvestment-rc, equities-enrichment-service-app-cm-env, ConfigMap (v1) has changed:
# Source: base/templates/cm-env.yaml
apiVersion: v1
kind: ConfigMap
metadata:
name: equities-enrichment-service-app-cm-env
labels:
app: equities-enrichment-service
fullname: equities-enrichment-service
chart: base-1.14.2
release: equities-enrichment-service
heritage: Helm
isys: "myinvestment-rc"
psvc: "equities-enrichment-service"
- version: "1.0.1-RC9"
+ version: "1.2.0-RC1"
workload.topology.app.farm/zone: "rumsk1"
data:
APP_KAFKA_BOOTSTRAP_SERVERS_PLATFORM_MYINVESTMENT_PEINVEST_APPFARM_KAFKA: "adapter-myinvestment-peinvest-appfarm-kafka.isys-myinvestment-rc-links:9092"
JAVA_OPTS: "-XX:+PrintFlagsFinal -XX:MaxRAMPercentage=75.0 -XX:MinRAMPercentage=75.0 -XX:+UseTransparentHugePages"
LOGGING_LEVEL_RU_RSHBINTECH: "info"
resources: "map[limits:map[cpu:3000m] requests:map[cpu:900m]]"
Listing releases matching ^vault-secrets-equities-enrichment-service$
in deploy/helmfile.yaml: 2 errors:
err 0: command "/usr/local/link/helm" exited with non-zero status:
PATH:
/usr/local/link/helm
ARGS:
0: helm (4 bytes)
1: --kube-context (14 bytes)
2: rcsdstbl (8 bytes)
3: diff (4 bytes)
4: upgrade (7 bytes)
5: --reset-values (14 bytes)
6: --allow-unreleased (18 bytes)
7: links-equities-enrichment-service (33 bytes)
8: rshb-charts/raw (15 bytes)
9: --version (9 bytes)
10: 0.2.3-rshb.1.0.0 (16 bytes)
11: --kube-context (14 bytes)
12: rcsdstbl (8 bytes)
13: --namespace (11 bytes)
14: isys-myinvestment-rc (20 bytes)
15: --values (8 bytes)
16: /tmp/helmfile2759700624/isys-myinvestment-rc-links-equities-enrichment-service-values-77c6556dd9 (96 bytes)
17: --values (8 bytes)
18: /tmp/helmfile2637925131/isys-myinvestment-rc-links-equities-enrichment-service-values-546b46467f (96 bytes)
19: --detailed-exitcode (19 bytes)
20: --suppress-secrets (18 bytes)
ERROR:
exit status 1
EXIT STATUS
1
STDERR:
Error: exit status 1: Error: Kubernetes cluster unreachable: Get "https://100.79.64.1:6443/version": net/http: TLS handshake timeout
Error: plugin "diff" exited with error
COMBINED OUTPUT:
Error: exit status 1: Error: Kubernetes cluster unreachable: Get "https://100.79.64.1:6443/version": net/http: TLS handshake timeout
Error: plugin "diff" exited with error
err 1: command "/usr/local/link/helm" exited with non-zero status:
PATH:
/usr/local/link/helm
ARGS:
0: helm (4 bytes)
1: --kube-context (14 bytes)
2: rcsdstbl (8 bytes)
3: list (4 bytes)
4: --filter (8 bytes)
5: ^vault-secrets-equities-enrichment-service$ (43 bytes)
6: --kube-context (14 bytes)
7: rcsdstbl (8 bytes)
8: --namespace (11 bytes)
9: isys-myinvestment-rc (20 bytes)
10: --uninstalling (14 bytes)
11: --deployed (10 bytes)
12: --failed (8 bytes)
13: --pending (9 bytes)
ERROR:
exit status 1
EXIT STATUS
1
STDERR:
Error: Kubernetes cluster unreachable: Get "https://100.79.64.1:6443/version": net/http: TLS handshake timeout
COMBINED OUTPUT:
Error: Kubernetes cluster unreachable: Get "https://100.79.64.1:6443/version": net/http: TLS handshake timeout
Uploading artifacts for failed job
00:01
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories
Uploading artifacts as "dotenv" to coordinator... 201 Created id=21831857 responseStatus=201 Created token=64_zdTTo
Cleaning up project directory and file based variables
00:01
ERROR: Job failed: command terminated with exit code 1