https://pastein.ru/t/zSg
Загрузка данных
Running with gitlab-runner 15.8.0 (12335144)
on gitlab-runner-gitlab-runner-6f4d49d99-h585b 8W3Nm2Mz, system ID: r_DYVWgNUEigZr
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.18 ...
Using attach strategy to execute scripts...
Preparing environment
00:06
Waiting for pod gitlab-runners/runner-8w3nm2mz-project-86042-concurrent-0qgrd2 to be running, status is Pending
Waiting for pod gitlab-runners/runner-8w3nm2mz-project-86042-concurrent-0qgrd2 to be running, status is Pending
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-8w3nm2mz-project-86042-concurrent-0qgrd2 via gitlab-runner-gitlab-runner-6f4d49d99-h585b...
Getting source from Git repository
00:02
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/crft/ckof/ownfin/frontend/prd/salary-credit-ui/.git/
Created fresh repository.
Checking out 67ef1437 as 1.9.0...
Skipping Git submodules setup
Downloading artifacts
00:04
Downloading artifacts for init_dojo (25901623)...
Downloading artifacts from coordinator... ok id=25901623 responseStatus=200 OK token=64_jGesK
Downloading artifacts for devsecops_antivirus_scan (25901624)...
Downloading artifacts from coordinator... ok id=25901624 responseStatus=200 OK token=64_jGesK
Downloading artifacts for secrets_gitleaks (25901625)...
Downloading artifacts from coordinator... ok id=25901625 responseStatus=200 OK token=64_jGesK
Downloading artifacts for sast_semgrep (25901626)...
Downloading artifacts from coordinator... ok id=25901626 responseStatus=200 OK token=64_jGesK
Downloading artifacts for sast_ptai (25901627)...
Downloading artifacts from coordinator... ok id=25901627 responseStatus=200 OK token=64_jGesK
Downloading artifacts for dockerfilegen (25901628)...
Downloading artifacts from coordinator... ok id=25901628 responseStatus=200 OK token=64_jGesK
Downloading artifacts for sca_scan (25901632)...
Downloading artifacts from coordinator... ok id=25901632 responseStatus=200 OK token=64_jGesK
Downloading artifacts for bca_trivy (25901636)...
Downloading artifacts from coordinator... ok id=25901636 responseStatus=200 OK token=64_jGesK
Executing "step_script" stage of the job script
01:25
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: rcsdstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=rcsdstbl
++ CLUSTER=rcsdstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ production = production ]]
++ export NAMESPACE=isys-ownfin
++ NAMESPACE=isys-ownfin
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context rcsdstbl -n isys-ownfin history salary-credit-ui
+++ tail -1
+++ cut -f1,3
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ deployed =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"
++ helmfile --environment rcsdstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/frontend/prd/salary-credit-ui/-/pipelines/3722730 --set additionalWorkloadAnnotations.gitlabCommit=67ef1437061a050f78f46501ec7a73064f5b7ddd
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/crft/ckof/ownfin/frontend/prd/salary-credit-ui
no matches for path: envs/production/rcsdstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=psvc-salary-credit-ui, chart=rshb-charts/raw
isys-ownfin, salary-credit-ui, PlatformService (production.platform.ckpr.integrations.rshbintech.ru) has changed:
# Source: raw/templates/resources.yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: PlatformService
metadata:
annotations:
ci.build.image.app.farm/version: 22.22.2-bookworm-rshb.0.4.0
ci.runtime.image.app.farm/version: 1.29.8-alpine3.23-rshb.0.8.0
labels:
app: raw
chart: raw-0.2.3-rshb.1.0.0
ci.build.image.app.farm/name: node
ci.kubeclientapps.app.farm/version: 8.21.18
ci.runtime.image.app.farm/name: nginx
ci.service.app.farm/lang: typescript
ci.service.app.farm/side: frontend
- commitShortSHA: 8607dcb3
+ commitShortSHA: 67ef1437
heritage: Helm
release: psvc-salary-credit-ui
- version: 1.8.0
+ version: 1.9.0
name: salary-credit-ui
spec:
cpuLimits: 250m
cpuRequests: 200m
description: Свои Финансы - Заявка на кредит до пенсии или зарплаты
environment: PRODUCTION
informationSystemId: ownfin
name: Свои Финансы - Заявка на кредит до пенсии или зарплаты
projectPath: /rshbintech/crft/ckof/ownfin/frontend/prd/salary-credit-ui
publicDomain: salary-credit-ui
ramLimits: 512Mi
ramRequests: 128Mi
replicaCount: 1
serviceReference:
name: salary-credit-ui
namespace: isys-ownfin
side: frontend
updateStrategy: Recreate
Comparing release=salary-credit-ui, chart=rshb-charts/base
isys-ownfin, salary-credit-ui, Deployment (apps) has changed:
# Source: base/templates/workload.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: salary-credit-ui
labels:
app: salary-credit-ui
fullname: salary-credit-ui
chart: base-1.15.3
release: salary-credit-ui
heritage: Helm
isys: "ownfin"
psvc: "salary-credit-ui"
- version: "1.8.0"
+ version: "1.9.0"
workload.topology.app.farm/zone: "rumsk1"
annotations:
- gitlabCommit: 8607dcb3de36af28b42188e3aade67b24aa5048e
- gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/frontend/prd/salary-credit-ui/-/pipelines/3701408
- platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 8607dcb3
- platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3701408"
+ gitlabCommit: 67ef1437061a050f78f46501ec7a73064f5b7ddd
+ gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/frontend/prd/salary-credit-ui/-/pipelines/3722730
+ platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 67ef1437
+ platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3722730"
spec:
strategy:
type: Recreate
replicas: 1
selector:
matchLabels:
app: salary-credit-ui
fullname: salary-credit-ui
release: salary-credit-ui
template:
metadata:
labels:
app: salary-credit-ui
fullname: salary-credit-ui
chart: base-1.15.3
release: salary-credit-ui
heritage: Helm
isys: "ownfin"
psvc: "salary-credit-ui"
- version: "1.8.0"
+ version: "1.9.0"
workload.topology.app.farm/zone: "rumsk1"
annotations:
checksum/configMapsEnv: "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b"
checksum/secretEnv: "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b"
inject.istio.io/templates: "sidecar,custom"
sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"ownfin-envoy-filters\"}}]"
sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
spec:
automountServiceAccountToken: false
serviceAccountName: default
nodeSelector:
workload.topology.app.farm/zone: rumsk1
priorityClassName: rumsk1
containers:
- name: app
- image: registry.rshbdev.ru/rshbintech/crft/ckof/ownfin/frontend/prd/salary-credit-ui:1.8.0
+ image: registry.rshbdev.ru/rshbintech/crft/ckof/ownfin/frontend/prd/salary-credit-ui:1.9.0
imagePullPolicy: IfNotPresent
resources:
limits:
cpu: 250m
memory: 512Mi
requests:
cpu: 200m
memory: 128Mi
ports:
livenessProbe:
failureThreshold: 5
httpGet:
path: /health/liveness
port: 8080
initialDelaySeconds: 20
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
readinessProbe:
failureThreshold: 3
httpGet:
path: /health/readiness
port: 8080
initialDelaySeconds: 15
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
procMount: Default
readOnlyRootFilesystem: false
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
securityContext:
fsGroup: 1001
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
tolerations:
- effect: NoSchedule
key: workload.topology.app.farm/zone
operator: Exists
hostNetwork: false
volumes:
isys-ownfin, salary-credit-ui, Service (v1) has changed:
# Source: base/templates/svc.yaml
apiVersion: v1
kind: Service
metadata:
name: salary-credit-ui
labels:
app: salary-credit-ui
fullname: salary-credit-ui
chart: base-1.15.3
release: salary-credit-ui
heritage: Helm
isys: "ownfin"
psvc: "salary-credit-ui"
- version: "1.8.0"
+ version: "1.9.0"
spec:
ports:
- name: web
port: 80
protocol: TCP
targetPort: 8080
selector:
app: salary-credit-ui
fullname: salary-credit-ui
release: salary-credit-ui
type: ClusterIP
Listing releases matching ^vault-secrets-salary-credit-ui$
Listing releases matching ^pjob-salary-credit-ui$
Listing releases matching ^exsvc-salary-credit-ui$
Listing releases matching ^data-salary-credit-ui$
Listing releases matching ^assets-config-salary-credit-ui$
Listing releases matching ^platform-database-salary-credit-ui$
Listing releases matching ^salary-credit-ui-raw$
Listing releases matching ^salary-credit-ui-grafana-dashboard$
Listing releases matching ^salary-credit-ui-prometheus-rules$
Listing releases matching ^links-salary-credit-ui$
Listing releases matching ^salary-credit-ui-rumsk1$
Listing releases matching ^salary-credit-ui-rumsk2$
Upgrading release=psvc-salary-credit-ui, chart=rshb-charts/raw
FAILED RELEASES:
NAME
psvc-salary-credit-ui
in deploy/helmfile.yaml: failed processing release psvc-salary-credit-ui: command "/usr/local/link/helm" exited with non-zero status:
PATH:
/usr/local/link/helm
ARGS:
0: helm (4 bytes)
1: --kube-context (14 bytes)
2: rcsdstbl (8 bytes)
3: upgrade (7 bytes)
4: --install (9 bytes)
5: --reset-values (14 bytes)
6: psvc-salary-credit-ui (21 bytes)
7: rshb-charts/raw (15 bytes)
8: --version (9 bytes)
9: 0.2.3-rshb.1.0.0 (16 bytes)
10: --wait (6 bytes)
11: --timeout (9 bytes)
12: 600s (4 bytes)
13: --atomic (8 bytes)
14: --kube-context (14 bytes)
15: rcsdstbl (8 bytes)
16: --namespace (11 bytes)
17: isys-ownfin (11 bytes)
18: --values (8 bytes)
19: /tmp/helmfile973889192/isys-ownfin-psvc-salary-credit-ui-values-d59c6bf6d (73 bytes)
20: --values (8 bytes)
21: /tmp/helmfile1633081739/isys-ownfin-psvc-salary-credit-ui-values-775c94b88 (74 bytes)
22: --set (5 bytes)
23: additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/frontend/prd/salary-credit-ui/-/pipelines/3722730 (148 bytes)
24: --set (5 bytes)
25: additionalWorkloadAnnotations.gitlabCommit=67ef1437061a050f78f46501ec7a73064f5b7ddd (83 bytes)
26: --history-max (13 bytes)
27: 10 (2 bytes)
ERROR:
exit status 1
EXIT STATUS
1
STDERR:
Error: UPGRADE FAILED: update: failed to update: Put "https://100.79.64.1:6443/api/v1/namespaces/isys-ownfin/secrets/sh.helm.release.v1.psvc-salary-credit-ui.v12": read tcp 100.70.138.164:44016->100.79.64.1:6443: read: connection reset by peer
COMBINED OUTPUT:
Error: UPGRADE FAILED: update: failed to update: Put "https://100.79.64.1:6443/api/v1/namespaces/isys-ownfin/secrets/sh.helm.release.v1.psvc-salary-credit-ui.v12": read tcp 100.70.138.164:44016->100.79.64.1:6443: read: connection reset by peer
Uploading artifacts for failed job
00:01
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories
Uploading artifacts as "dotenv" to coordinator... 201 Created id=25901638 responseStatus=201 Created token=64_jGesK
Cleaning up project directory and file based variables
00:00
ERROR: Job failed: command terminated with exit code 1