Running with gitlab-runner 14.3.2 (e0218c92)
  on gitlab-runners-bigbang-gitlab-runner-privileged-gitlab-runjsr58 RKphpr5_
section_start:1634238876:resolve_secrets
Resolving secrets
section_end:1634238876:resolve_secrets
section_start:1634238876:prepare_executor
Preparing the "kubernetes" executor
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.dso.mil/platform-one/big-bang/pipeline-templates/pipeline-templates/k8s-ci:v1.20.4-bb.3 ...
Using attach strategy to execute scripts...
section_end:1634238876:prepare_executor
section_start:1634238876:prepare_script
Preparing environment
Waiting for pod gitlab-runners/runner-rkphpr5-project-2872-concurrent-0rbnp9 to be running, status is Pending
	ContainersNotReady: "containers with unready status: [build helper svc-0]"
	ContainersNotReady: "containers with unready status: [build helper svc-0]"
Running on runner-rkphpr5-project-2872-concurrent-0rbnp9 via gitlab-runners-bigbang-gitlab-runner-privileged-gitlab-runjsr58...

section_end:1634238883:prepare_script
section_start:1634238883:get_sources
Getting source from Git repository
Fetching changes with git depth set to 50...
hint: Using 'master' as the name for the initial branch. This default branch name
hint: is subject to change. To configure the initial branch name to use in all
hint: of your new repositories, which will suppress this warning, call:
hint: 
hint: 	git config --global init.defaultBranch <name>
hint: 
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint: 
hint: 	git branch -m <name>
Initialized empty Git repository in /builds/RKphpr5_/0/platform-one/big-bang/bigbang/.git/
Created fresh repository.
Checking out 4f00a5a3 as refs/merge-requests/965/head...

Skipping Git submodules setup

section_end:1634238885:get_sources
section_start:1634238885:step_script
Executing "step_script" stage of the job script
$ echo -e "\e[0Ksection_start:`date +%s`:k3d_up[collapsed=true]\r\e[0K\e[33;1mK3D Cluster Create\e[37m"
section_start:1634238885:k3d_up[collapsed=true]
K3D Cluster Create
$ i=0; while [ "$i" -lt 12 ]; do docker info &>/dev/null && break; sleep 5; i=$(( i + 1 )) ; done
$ docker network create ${CI_JOB_ID} --driver=bridge -o "com.docker.network.driver.mtu"="1450" --subnet=172.20.0.0/16
6d483b10c03d163bc331911785f0a8d21636b7403bfbbd0701def13e722d750e
$ chmod +x tests/ci/k3d/deploy_k3d.sh; echo "Executing tests/ci/k3d/deploy_k3d.sh..."; ./tests/ci/k3d/deploy_k3d.sh
Executing tests/ci/k3d/deploy_k3d.sh...
+ trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR
+ docker login -u [MASKED] -p [MASKED]
WARNING! Using --password via the CLI is insecure. Use --password-stdin.
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded
+ [[ '' == \m\a\s\t\e\r ]]
+ [[ ! -z '' ]]
+ [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ keycloak ]]
+ [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ all-packages ]]
+ k3d cluster create 7306903 --config tests/ci/k3d/config.yaml --network 7306903
INFO[0000] Using config file tests/ci/k3d/config.yaml   
INFO[0000] Prep: Network                                
INFO[0000] Network with name '7306903' already exists with ID '6d483b10c03d163bc331911785f0a8d21636b7403bfbbd0701def13e722d750e' 
INFO[0000] Created volume 'k3d-7306903-images'          
INFO[0001] Creating node 'k3d-7306903-server-0'         
INFO[0002] Pulling image 'docker.io/rancher/k3s:v1.20.4-k3s1' 
INFO[0004] Creating LoadBalancer 'k3d-7306903-serverlb' 
INFO[0005] Pulling image 'docker.io/rancher/k3d-proxy:v4.3.0' 
INFO[0007] Starting cluster '7306903'                   
INFO[0007] Starting servers...                          
INFO[0007] Starting Node 'k3d-7306903-server-0'         
INFO[0013] Starting agents...                           
INFO[0013] Starting helpers...                          
INFO[0013] Starting Node 'k3d-7306903-serverlb'         
INFO[0013] (Optional) Trying to get IP of the docker host and inject it into the cluster as 'host.k3d.internal' for easy access 
INFO[0013] Cluster '7306903' created successfully!      
INFO[0013] --kubeconfig-update-default=false --> sets --kubeconfig-switch-context=false 
INFO[0013] You can now use it like this:                
kubectl config use-context k3d-7306903
kubectl cluster-info
$ until kubectl get deployment coredns -n kube-system -o go-template='{{.status.availableReplicas}}' | grep -v -e '<no value>'; do sleep 1s; done
Error from server (NotFound): deployments.apps "coredns" not found
1
$ chmod +x tests/ci/k3d/metallb/install_metallb.sh; echo "Executing tests/ci/k3d/metallb/install_metallb.sh..."; ./tests/ci/k3d/metallb/install_metallb.sh
Executing tests/ci/k3d/metallb/install_metallb.sh...
+ trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR
+ [[ '' == \m\a\s\t\e\r ]]
+ [[ ! -z '' ]]
+ [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ keycloak ]]
+ [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ all-packages ]]
+ echo 'Keycloak not present, Metallb will not be install'
Keycloak not present, Metallb will not be install
$ kubectl get all -A
NAMESPACE     NAME                                          READY   STATUS    RESTARTS   AGE
kube-system   pod/metrics-server-86cbb8457f-tcd8k           1/1     Running   0          8s
kube-system   pod/local-path-provisioner-5ff76fc89d-nmsxp   1/1     Running   0          8s
kube-system   pod/coredns-854c77959c-7w66x                  1/1     Running   0          8s

NAMESPACE     NAME                     TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)                  AGE
default       service/kubernetes       ClusterIP   10.43.0.1      <none>        443/TCP                  25s
kube-system   service/kube-dns         ClusterIP   10.43.0.10     <none>        53/UDP,53/TCP,9153/TCP   23s
kube-system   service/metrics-server   ClusterIP   10.43.38.184   <none>        443/TCP                  23s

NAMESPACE     NAME                                     READY   UP-TO-DATE   AVAILABLE   AGE
kube-system   deployment.apps/metrics-server           1/1     1            1           23s
kube-system   deployment.apps/local-path-provisioner   1/1     1            1           23s
kube-system   deployment.apps/coredns                  1/1     1            1           23s

NAMESPACE     NAME                                                DESIRED   CURRENT   READY   AGE
kube-system   replicaset.apps/metrics-server-86cbb8457f           1         1         1       9s
kube-system   replicaset.apps/local-path-provisioner-5ff76fc89d   1         1         1       9s
kube-system   replicaset.apps/coredns-854c77959c                  1         1         1       9s
$ echo -e "\e[0Ksection_end:`date +%s`:k3d_up\r\e[0K"
section_end:1634238923:k3d_up

$ echo "Install Big Bang from ${CI_MERGE_REQUEST_TARGET_BRANCH_NAME}"
Install Big Bang from master
$ echo -e "\e[0Ksection_start:`date +%s`:git_master[collapsed=true]\r\e[0K\e[33;1mGit Fetch Master\e[37m"
section_start:1634238923:git_master[collapsed=true]
Git Fetch Master
$ git fetch && git checkout ${CI_MERGE_REQUEST_TARGET_BRANCH_NAME}
From https://repo1.dso.mil/platform-one/big-bang/bigbang
 * [new branch]      1.12.0/valuefiles-patch -> origin/1.12.0/valuefiles-patch
 * [new branch]      1.12.1-valuefiles-patch -> origin/1.12.1-valuefiles-patch
 * [new branch]      141-add-documentation-for-bigbang-helm-values -> origin/141-add-documentation-for-bigbang-helm-values
 * [new branch]      145-add-additional-image-list-for-release -> origin/145-add-additional-image-list-for-release
 * [new branch]      183-gitlab-support-for-pages -> origin/183-gitlab-support-for-pages
 * [new branch]      194-fluent-bit-image-missing -> origin/194-fluent-bit-image-missing
 * [new branch]      240-introduce-capabilities-matrix-to-documentation -> origin/240-introduce-capabilities-matrix-to-documentation
 * [new branch]      253-release-pipeline-always-clones-from-main -> origin/253-release-pipeline-always-clones-from-main
 * [new branch]      282-minio-istio-defaults-to-enabled -> origin/282-minio-istio-defaults-to-enabled
 * [new branch]      295-document-gitlab-package-architecture-in-charter -> origin/295-document-gitlab-package-architecture-in-charter
 * [new branch]      302-document-minio-package-architecture-in-charter -> origin/302-document-minio-package-architecture-in-charter
 * [new branch]      408-kiali-custom-root-ca -> origin/408-kiali-custom-root-ca
 * [new branch]      42-feat-add-mattermost-as-bigbang-addon -> origin/42-feat-add-mattermost-as-bigbang-addon
 * [new branch]      492-publish-images-txt-for-individual-bb-components -> origin/492-publish-images-txt-for-individual-bb-components
 * [new branch]      497-keycloak-release    -> origin/497-keycloak-release
 * [new branch]      528-add-ability-to-the-install_flux-sh-script-to-use-existing-registry-secret-if-it-exists -> origin/528-add-ability-to-the-install_flux-sh-script-to-use-existing-registry-secret-if-it-exists
 * [new branch]      549-all-packages-implementation -> origin/549-all-packages-implementation
 * [new branch]      549-testing-branch      -> origin/549-testing-branch
 * [new branch]      561-update-codeowners-fluentbit -> origin/561-update-codeowners-fluentbit
 * [new branch]      571-nexus-dns-netpol-does-not-allow-port-5353-for-openshift -> origin/571-nexus-dns-netpol-does-not-allow-port-5353-for-openshift
 * [new branch]      572-anchore-dns-netpol-does-not-allow-port-5353-for-openshift -> origin/572-anchore-dns-netpol-does-not-allow-port-5353-for-openshift
 * [new branch]      599-monitoring-helmrelease-does-not-achieve-health -> origin/599-monitoring-helmrelease-does-not-achieve-health
 * [new branch]      601-unable-to-deploy-bigbang-when-deployed-over-an-ec2 -> origin/601-unable-to-deploy-bigbang-when-deployed-over-an-ec2
 * [new branch]      647-logging-loki        -> origin/647-logging-loki
 * [new branch]      647-logging-loki-riley  -> origin/647-logging-loki-riley
 * [new branch]      653-flux-infinite       -> origin/653-flux-infinite
 * [new branch]      659-no-cert             -> origin/659-no-cert
 * [new branch]      698-eckoperator-bump    -> origin/698-eckoperator-bump
 * [new branch]      715-gitlab-hostname-improvements -> origin/715-gitlab-hostname-improvements
 * [new branch]      719-retrospective-update-codeowners -> origin/719-retrospective-update-codeowners
 * [new branch]      758-add-support-for-gitlab-multipart -> origin/758-add-support-for-gitlab-multipart
 * [new branch]      79-pipelines-call-package-tests -> origin/79-pipelines-call-package-tests
 * [new branch]      80-prometheus-sso-not-working-2 -> origin/80-prometheus-sso-not-working-2
 * [new branch]      813-authservice-sso-change -> origin/813-authservice-sso-change
 * [new branch]      813-kiali-jaeger-sso    -> origin/813-kiali-jaeger-sso
 * [new branch]      833-gitlab-object-storage-use_iam_role -> origin/833-gitlab-object-storage-use_iam_role
 * [new branch]      835-docs-reseller       -> origin/835-docs-reseller
 * [new branch]      836-need-to-add-retries-to-pre-var-stage -> origin/836-need-to-add-retries-to-pre-var-stage
 * [new branch]      838-docs-upstream       -> origin/838-docs-upstream
 * [new branch]      839-doc-pipeline-integration -> origin/839-doc-pipeline-integration
 * [new branch]      842-docs-flux-integration -> origin/842-docs-flux-integration
 * [new branch]      843-docs-istio-integration -> origin/843-docs-istio-integration
 * [new branch]      850-docs-extra          -> origin/850-docs-extra
 * [new branch]      851-docs-supported-integration -> origin/851-docs-supported-integration
 * [new branch]      BB-1003                 -> origin/BB-1003
 * [new branch]      BB-1073                 -> origin/BB-1073
 * [new branch]      BB-1073-airgap          -> origin/BB-1073-airgap
 * [new branch]      BB-1073-airgap-ismail   -> origin/BB-1073-airgap-ismail
 * [new branch]      BB-1084                 -> origin/BB-1084
 * [new branch]      BB-694                  -> origin/BB-694
 * [new branch]      BB-857_8                -> origin/BB-857_8
 * [new branch]      BBOI-1007_keycloak_sso_quickstart -> origin/BBOI-1007_keycloak_sso_quickstart
 * [new branch]      BBOI-435_data_flow_diagram -> origin/BBOI-435_data_flow_diagram
 * [new branch]      BBOI-464_Network_Flow_Diagram -> origin/BBOI-464_Network_Flow_Diagram
 * [new branch]      add-coder-charter       -> origin/add-coder-charter
 * [new branch]      add-kube-labels         -> origin/add-kube-labels
 * [new branch]      add-terraform-optional-secret -> origin/add-terraform-optional-secret
 * [new branch]      addon/mysql             -> origin/addon/mysql
 * [new branch]      addons/keycloak         -> origin/addons/keycloak
 * [new branch]      airgap-BB-1073          -> origin/airgap-BB-1073
 * [new branch]      airgap-test-123         -> origin/airgap-test-123
 * [new branch]      airgapped-docs-update-suggestions -> origin/airgapped-docs-update-suggestions
 * [new branch]      aks-defaults            -> origin/aks-defaults
 * [new branch]      anchore-upgrade         -> origin/anchore-upgrade
 * [new branch]      antora                  -> origin/antora
 * [new branch]      argocd-istio-enabled-by-default -> origin/argocd-istio-enabled-by-default
 * [new branch]      argocd-network-policy   -> origin/argocd-network-policy
 * [new branch]      argocd-tag-bump         -> origin/argocd-tag-bump
 * [new branch]      authservice-external-redis -> origin/authservice-external-redis
 * [new branch]      authservice-for-kibana  -> origin/authservice-for-kibana
 * [new branch]      autoscaler-load-test    -> origin/autoscaler-load-test
 * [new branch]      bb-1173-jira-addon-2    -> origin/bb-1173-jira-addon-2
 * [new branch]      bb-1188/confluence      -> origin/bb-1188/confluence
 * [new branch]      bb-1203                 -> origin/bb-1203
 * [new branch]      bb-1272                 -> origin/bb-1272
 * [new branch]      bb-1287                 -> origin/bb-1287
 * [new branch]      bb-16/postgres-operator -> origin/bb-16/postgres-operator
 * [new branch]      bb-291-keycloak         -> origin/bb-291-keycloak
 * [new branch]      bb-628-dev-docs         -> origin/bb-628-dev-docs
 * [new branch]      bb-736                  -> origin/bb-736
 * [new branch]      bb-751                  -> origin/bb-751
 * [new branch]      bb-81                   -> origin/bb-81
 * [new branch]      bb-843                  -> origin/bb-843
 * [new branch]      bb-843-grafana          -> origin/bb-843-grafana
 * [new branch]      bb-844-2                -> origin/bb-844-2
 * [new branch]      bb-844-auth             -> origin/bb-844-auth
 * [new branch]      bb-848                  -> origin/bb-848
 * [new branch]      bb-870                  -> origin/bb-870
 * [new branch]      bigbang-json-schema     -> origin/bigbang-json-schema
 * [new branch]      blloyd-fluentbit-5353udp -> origin/blloyd-fluentbit-5353udp
 * [new branch]      blloyd-fluentbit-ci-testing -> origin/blloyd-fluentbit-ci-testing
 * [new branch]      blloyd-master-patch-12171 -> origin/blloyd-master-patch-12171
 * [new branch]      blloyd-minio-port5353   -> origin/blloyd-minio-port5353
 * [new branch]      branch-1.12.x           -> origin/branch-1.12.x
 * [new branch]      breakout-cicd-steps     -> origin/breakout-cicd-steps
 * [new branch]      bundle-jobs             -> origin/bundle-jobs
 * [new branch]      bundler                 -> origin/bundler
 * [new branch]      charter-update-gabe     -> origin/charter-update-gabe
 * [new branch]      charter-update-jasonkrause -> origin/charter-update-jasonkrause
 * [new branch]      cherry-pick-2e1bacb7    -> origin/cherry-pick-2e1bacb7
 * [new branch]      cherry-pick-6306ab9e    -> origin/cherry-pick-6306ab9e
 * [new branch]      cherry-pick-cfedd8c1    -> origin/cherry-pick-cfedd8c1
 * [new branch]      ci-environments         -> origin/ci-environments
 * [new branch]      ci/buildkit             -> origin/ci/buildkit
 * [new branch]      ci/infra-image          -> origin/ci/infra-image
 * [new branch]      ci/only-infra-on-schedule -> origin/ci/only-infra-on-schedule
 * [new branch]      ci/rke2-stig            -> origin/ci/rke2-stig
 * [new branch]      ci/sizing               -> origin/ci/sizing
 * [new branch]      ci/skip-docs            -> origin/ci/skip-docs
 * [new branch]      ci/tester               -> origin/ci/tester
 * [new branch]      cluster-auditor-network-policies -> origin/cluster-auditor-network-policies
 * [new branch]      cluster-auditor-prometheus -> origin/cluster-auditor-prometheus
 * [new branch]      codeowners              -> origin/codeowners
 * [new branch]      coder-n-bigbang         -> origin/coder-n-bigbang
 * [new branch]      compliance              -> origin/compliance
 * [new branch]      cz-test                 -> origin/cz-test
 * [new branch]      demo                    -> origin/demo
 * [new branch]      deploy-mattermost       -> origin/deploy-mattermost
 * [new branch]      deploy-vault            -> origin/deploy-vault
 * [new branch]      dev-confluence          -> origin/dev-confluence
 * [new branch]      doc-arch-eckoperator-311 -> origin/doc-arch-eckoperator-311
 * [new branch]      doc-update              -> origin/doc-update
 * [new branch]      docs                    -> origin/docs
 * [new branch]      docs-edge               -> origin/docs-edge
 * [new branch]      docs-edge-deployment    -> origin/docs-edge-deployment
 * [new branch]      docs-robk               -> origin/docs-robk
 * [new branch]      documentation/Deploy-Secrets -> origin/documentation/Deploy-Secrets
 * [new branch]      dogfood                 -> origin/dogfood
 * [new branch]      eck-operator-network-policies -> origin/eck-operator-network-policies
 * [new branch]      ek39-logging-bb-ci      -> origin/ek39-logging-bb-ci
 * [new branch]      elastic-is-slow         -> origin/elastic-is-slow
 * [new branch]      enable-monitoring-istio-injection -> origin/enable-monitoring-istio-injection
 * [new branch]      enhanced-testing        -> origin/enhanced-testing
 * [new branch]      feature/add-keycloak-repo -> origin/feature/add-keycloak-repo
 * [new branch]      feature/authservice-google-auth-example -> origin/feature/authservice-google-auth-example
 * [new branch]      feature/rothandrew-proposed-docs-updates -> origin/feature/rothandrew-proposed-docs-updates
 * [new branch]      filmo003-master-patch-17332 -> origin/filmo003-master-patch-17332
 * [new branch]      filmo003-master-patch-66184 -> origin/filmo003-master-patch-66184
 * [new branch]      filmo003-master-patch-87347 -> origin/filmo003-master-patch-87347
 * [new branch]      fix/remove_interval_nxrm -> origin/fix/remove_interval_nxrm
 * [new branch]      fix/remove_interval_nxrm-1.12.0 -> origin/fix/remove_interval_nxrm-1.12.0
 * [new branch]      fix/set-reasonable-flux-reqs -> origin/fix/set-reasonable-flux-reqs
 * [new branch]      fluentd                 -> origin/fluentd
 * [new branch]      flux-helm               -> origin/flux-helm
 * [new branch]      flux-https-patch        -> origin/flux-https-patch
 * [new branch]      gatekeeper-nps          -> origin/gatekeeper-nps
 * [new branch]      gatekeeper-remove-bigbang-overrides -> origin/gatekeeper-remove-bigbang-overrides
 * [new branch]      gatekeeper-remove-disabled-constraints -> origin/gatekeeper-remove-disabled-constraints
 * [new branch]      gitlab-runners          -> origin/gitlab-runners
 * [new branch]      gitpkg                  -> origin/gitpkg
 * [new branch]      hardcoded-wildcard-affects-http-to-https-redirects-with-istio-gateways -> origin/hardcoded-wildcard-affects-http-to-https-redirects-with-istio-gateways
 * [new branch]      hotfix/release-ci       -> origin/hotfix/release-ci
 * [new branch]      husky-v5                -> origin/husky-v5
 * [new branch]      issue-685-gatekeeper-metrics -> origin/issue-685-gatekeeper-metrics
 * [new branch]      issue_587               -> origin/issue_587
 * [new branch]      istio-annotations       -> origin/istio-annotations
 * [new branch]      istio-operator-network-policy -> origin/istio-operator-network-policy
 * [new branch]      istio-vs-consolodation  -> origin/istio-vs-consolodation
 * [new branch]      jasonkrause-master-patch-28584 -> origin/jasonkrause-master-patch-28584
 * [new branch]      json-schema             -> origin/json-schema
 * [new branch]      kenna-doc-hardened      -> origin/kenna-doc-hardened
 * [new branch]      kiali-jaeger-depends    -> origin/kiali-jaeger-depends
 * [new branch]      kiali-update-1.40.1     -> origin/kiali-update-1.40.1
 * [new branch]      killian.byrne-master-patch-54167 -> origin/killian.byrne-master-patch-54167
 * [new branch]      killian.byrne-master-patch-99227 -> origin/killian.byrne-master-patch-99227
 * [new branch]      kustomizestrategicmerge -> origin/kustomizestrategicmerge
 * [new branch]      logging-affinity        -> origin/logging-affinity
 * [new branch]      machine-id              -> origin/machine-id
 * [new branch]      machinetests            -> origin/machinetests
 * [new branch]      master                  -> origin/master
 * [new branch]      micah.nagel-master-patch-38375 -> origin/micah.nagel-master-patch-38375
 * [new branch]      micah.nagel-master-patch-49395 -> origin/micah.nagel-master-patch-49395
 * [new branch]      micah.nagel-master-patch-58087 -> origin/micah.nagel-master-patch-58087
 * [new branch]      micah.nagel-master-patch-69357 -> origin/micah.nagel-master-patch-69357
 * [new branch]      micah.nagel-master-patch-71988 -> origin/micah.nagel-master-patch-71988
 * [new branch]      micah.nagel-master-patch-76060 -> origin/micah.nagel-master-patch-76060
 * [new branch]      mm-istio-inject         -> origin/mm-istio-inject
 * [new branch]      mm-istio-sidecars       -> origin/mm-istio-sidecars
 * [new branch]      mm-operator-bug         -> origin/mm-operator-bug
 * [new branch]      nexus                   -> origin/nexus
 * [new branch]      nexus-bump-reenable     -> origin/nexus-bump-reenable
 * [new branch]      nexus-role-mapping      -> origin/nexus-role-mapping
 * [new branch]      nexus-tag-bump          -> origin/nexus-tag-bump
 * [new branch]      nexus_random_secret     -> origin/nexus_random_secret
 * [new branch]      nosysctls-deny          -> origin/nosysctls-deny
 * [new branch]      optional-codeowners     -> origin/optional-codeowners
 * [new branch]      pass-labels             -> origin/pass-labels
 * [new branch]      patch-gitsecretname     -> origin/patch-gitsecretname
 * [new branch]      patch-updated-gitrepository-in-base -> origin/patch-updated-gitrepository-in-base
 * [new branch]      pb-SDElements           -> origin/pb-SDElements
 * [new branch]      pb-jira                 -> origin/pb-jira
 * [new branch]      pb-retrotool            -> origin/pb-retrotool
 * [new branch]      pin-umbrella            -> origin/pin-umbrella
 * [new branch]      pipeline-fixes          -> origin/pipeline-fixes
 * [new branch]      pipeline-structure      -> origin/pipeline-structure
 * [new branch]      pydio-cells             -> origin/pydio-cells
 * [new branch]      readme-linting          -> origin/readme-linting
 * [new branch]      release                 -> origin/release
 * [new branch]      release-1.1             -> origin/release-1.1
 * [new branch]      release-1.10.x          -> origin/release-1.10.x
 * [new branch]      release-1.11.x          -> origin/release-1.11.x
 * [new branch]      release-1.12.x          -> origin/release-1.12.x
 * [new branch]      release-1.13.x          -> origin/release-1.13.x
 * [new branch]      release-1.14.x          -> origin/release-1.14.x
 * [new branch]      release-1.15.x          -> origin/release-1.15.x
 * [new branch]      release-1.16.x          -> origin/release-1.16.x
 * [new branch]      release-1.17.x          -> origin/release-1.17.x
 * [new branch]      release-1.18.x          -> origin/release-1.18.x
 * [new branch]      release-1.2.x           -> origin/release-1.2.x
 * [new branch]      release-1.3.x           -> origin/release-1.3.x
 * [new branch]      release-1.4.x           -> origin/release-1.4.x
 * [new branch]      release-1.5.0-changes   -> origin/release-1.5.0-changes
 * [new branch]      release-1.5.x           -> origin/release-1.5.x
 * [new branch]      release-1.6.x           -> origin/release-1.6.x
 * [new branch]      release-1.7.x           -> origin/release-1.7.x
 * [new branch]      release-1.8.x           -> origin/release-1.8.x
 * [new branch]      release-1.9.x           -> origin/release-1.9.x
 * [new branch]      release-job             -> origin/release-job
 * [new branch]      release-jobs            -> origin/release-jobs
 * [new branch]      remote-cluster          -> origin/remote-cluster
 * [new branch]      removecomment           -> origin/removecomment
 * [new branch]      resource-limits-gatekeeper-issue74-2 -> origin/resource-limits-gatekeeper-issue74-2
 * [new branch]      revert-1b509840         -> origin/revert-1b509840
 * [new branch]      rgarcia-helm-tests-2    -> origin/rgarcia-helm-tests-2
 * [new branch]      rkdevera-master-patch-75165 -> origin/rkdevera-master-patch-75165
 * [new branch]      rkdevera-master-patch-83497 -> origin/rkdevera-master-patch-83497
 * [new branch]      rkdevera-master-patch-97209 -> origin/rkdevera-master-patch-97209
 * [new branch]      rke2-pipeline           -> origin/rke2-pipeline
 * [new branch]      secret-for-thirdparty   -> origin/secret-for-thirdparty
 * [new branch]      semantic-test           -> origin/semantic-test
 * [new branch]      semantic-upgrade        -> origin/semantic-upgrade
 * [new branch]      sidt-1569-mv            -> origin/sidt-1569-mv
 * [new branch]      sonarqube-external-postgres -> origin/sonarqube-external-postgres
 * [new branch]      sonarqube-tag           -> origin/sonarqube-tag
 * [new branch]      sops-test               -> origin/sops-test
 * [new branch]      sopstesting             -> origin/sopstesting
 * [new branch]      spdx                    -> origin/spdx
 * [new branch]      staging                 -> origin/staging
 * [new branch]      synkerpkg               -> origin/synkerpkg
 * [new branch]      temporary-branch-pending-release -> origin/temporary-branch-pending-release
 * [new branch]      test-coder              -> origin/test-coder
 * [new branch]      test-coder-deployment   -> origin/test-coder-deployment
 * [new branch]      test-local              -> origin/test-local
 * [new branch]      test-manual-jobs        -> origin/test-manual-jobs
 * [new branch]      testing-documentation   -> origin/testing-documentation
 * [new branch]      tetrate_url             -> origin/tetrate_url
 * [new branch]      third-party-ux          -> origin/third-party-ux
 * [new branch]      tmp                     -> origin/tmp
 * [new branch]      tst-ban-image-tags      -> origin/tst-ban-image-tags
 * [new branch]      update-gatekeeper-3.6.0 -> origin/update-gatekeeper-3.6.0
 * [new branch]      update-istio            -> origin/update-istio
 * [new branch]      update-pods-have-istio  -> origin/update-pods-have-istio
 * [new branch]      utility                 -> origin/utility
 * [new branch]      vault                   -> origin/vault
 * [new branch]      vault-dev               -> origin/vault-dev
 * [new branch]      velero-test             -> origin/velero-test
 * [new branch]      victor-test             -> origin/victor-test
 * [new branch]      workflow-example        -> origin/workflow-example
 * [new tag]         1.1.2                   -> 1.1.2
 * [new tag]         1.10.1                  -> 1.10.1
 * [new tag]         1.11.0                  -> 1.11.0
 * [new tag]         1.11.0-rc.0             -> 1.11.0-rc.0
 * [new tag]         1.12.0                  -> 1.12.0
 * [new tag]         1.12.0-rc.0             -> 1.12.0-rc.0
 * [new tag]         1.12.1                  -> 1.12.1
 * [new tag]         1.12.1-rc.0             -> 1.12.1-rc.0
 * [new tag]         1.13.1                  -> 1.13.1
 * [new tag]         1.14.1                  -> 1.14.1
 * [new tag]         1.14.1-rc.0             -> 1.14.1-rc.0
 * [new tag]         1.15.3                  -> 1.15.3
 * [new tag]         1.16.2                  -> 1.16.2
 * [new tag]         1.16.2-rc.0             -> 1.16.2-rc.0
 * [new tag]         1.17.0                  -> 1.17.0
 * [new tag]         1.2.0                   -> 1.2.0
 * [new tag]         1.2.0-rc1               -> 1.2.0-rc1
 * [new tag]         1.3.0                   -> 1.3.0
 * [new tag]         1.3.0-rc.2              -> 1.3.0-rc.2
 * [new tag]         1.4.0                   -> 1.4.0
 * [new tag]         1.5.0                   -> 1.5.0
 * [new tag]         1.6.2                   -> 1.6.2
 * [new tag]         1.7.0                   -> 1.7.0
 * [new tag]         1.7.0-rc.2              -> 1.7.0-rc.2
 * [new tag]         1.8.1                   -> 1.8.1
 * [new tag]         1.8.1-rc.0              -> 1.8.1-rc.0
 * [new tag]         1.9.1                   -> 1.9.1
 * [new tag]         1.9.1-rc.1              -> 1.9.1-rc.1
 * [new tag]           0.0.1                   -> 0.0.1
 * [new tag]           0.0.2                   -> 0.0.2
 * [new tag]           1.0.0                   -> 1.0.0
 * [new tag]           1.0.0-rc.1              -> 1.0.0-rc.1
 * [new tag]           1.0.0-rc.2              -> 1.0.0-rc.2
 * [new tag]           1.0.1                   -> 1.0.1
 * [new tag]           1.0.2                   -> 1.0.2
 * [new tag]           1.0.4                   -> 1.0.4
 * [new tag]           1.0.6                   -> 1.0.6
 * [new tag]           1.0.7                   -> 1.0.7
 * [new tag]           1.1.0                   -> 1.1.0
 * [new tag]           1.1.1                   -> 1.1.1
 * [new tag]           1.1.1-rc1               -> 1.1.1-rc1
 * [new tag]           1.10.0                  -> 1.10.0
 * [new tag]           1.10.0-rc.0             -> 1.10.0-rc.0
 * [new tag]           1.10.0-rc.1             -> 1.10.0-rc.1
 * [new tag]           1.10.0-rc.2             -> 1.10.0-rc.2
 * [new tag]           1.13.0                  -> 1.13.0
 * [new tag]           1.13.0-rc.0             -> 1.13.0-rc.0
 * [new tag]           1.13.1-rc.0             -> 1.13.1-rc.0
 * [new tag]           1.13.1-rc.1             -> 1.13.1-rc.1
 * [new tag]           1.14.0                  -> 1.14.0
 * [new tag]           1.14.0-rc.0             -> 1.14.0-rc.0
 * [new tag]           1.15.0                  -> 1.15.0
 * [new tag]           1.15.0-rc.0             -> 1.15.0-rc.0
 * [new tag]           1.15.1                  -> 1.15.1
 * [new tag]           1.15.1-rc.0             -> 1.15.1-rc.0
 * [new tag]           1.15.2                  -> 1.15.2
 * [new tag]           1.15.2-rc.0             -> 1.15.2-rc.0
 * [new tag]           1.15.3-rc.0             -> 1.15.3-rc.0
 * [new tag]           1.16.0                  -> 1.16.0
 * [new tag]           1.16.0-rc.1             -> 1.16.0-rc.1
 * [new tag]           1.16.1                  -> 1.16.1
 * [new tag]           1.16.1-rc.0             -> 1.16.1-rc.0
 * [new tag]           1.17.0-rc.0             -> 1.17.0-rc.0
 * [new tag]           1.17.0-rc.1             -> 1.17.0-rc.1
 * [new tag]           1.17.0-rc.2             -> 1.17.0-rc.2
 * [new tag]           1.18.0                  -> 1.18.0
 * [new tag]           1.18.0-rc.0             -> 1.18.0-rc.0
 * [new tag]           1.18.0-rc.1             -> 1.18.0-rc.1
 * [new tag]           1.18.0-rc.2             -> 1.18.0-rc.2
 * [new tag]           1.18.0-rc.3             -> 1.18.0-rc.3
 * [new tag]           1.18.0-rc.4             -> 1.18.0-rc.4
 * [new tag]           1.3.0-rc.1              -> 1.3.0-rc.1
 * [new tag]           1.4.0-rc.1              -> 1.4.0-rc.1
 * [new tag]           1.5.0-rc.1              -> 1.5.0-rc.1
 * [new tag]           1.6.0                   -> 1.6.0
 * [new tag]           1.6.0-rc.1              -> 1.6.0-rc.1
 * [new tag]           1.6.1                   -> 1.6.1
 * [new tag]           1.7.0-rc.1              -> 1.7.0-rc.1
 * [new tag]           1.8.0                   -> 1.8.0
 * [new tag]           1.8.0-rc.0              -> 1.8.0-rc.0
 * [new tag]           1.8.0-rc.1              -> 1.8.0-rc.1
 * [new tag]           1.8.0-rc.2              -> 1.8.0-rc.2
 * [new tag]           1.9.0                   -> 1.9.0
 * [new tag]           1.9.0-rc.1              -> 1.9.0-rc.1
 * [new tag]           1.9.0-rc.2              -> 1.9.0-rc.2
Previous HEAD position was 4f00a5a3 update Kiali tag to 1.40.1-bb.0
Switched to a new branch 'master'
M	tests/ci/k3d/deploy_k3d.sh
M	tests/ci/k3d/metallb/install_metallb.sh
Branch 'master' set up to track remote branch 'master' from 'origin'.
$ echo -e "\e[0Ksection_end:`date +%s`:git_master\r\e[0K"
section_end:1634238924:git_master

$ set -e # collapsed multi-line command
section_start:1634238924:00_deploy_flux.sh[collapsed=true]
00_deploy_flux.sh
+ trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR
+ ./scripts/install_flux.sh --registry-username 'robot$bb-dev-imagepullonly' --registry-password [MASKED] --registry-email bigbang@bigbang.dev
REGISTRY_URL: registry1.dso.mil
REGISTRY_USERNAME: robot$bb-dev-imagepullonly
namespace/flux-system created
Creating secret private-registry in namespace flux-system
secret/private-registry created
Installing flux from kustomization
Warning: resource namespaces/flux-system is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.
namespace/flux-system configured
customresourcedefinition.apiextensions.k8s.io/alerts.notification.toolkit.fluxcd.io created
customresourcedefinition.apiextensions.k8s.io/buckets.source.toolkit.fluxcd.io created
customresourcedefinition.apiextensions.k8s.io/gitrepositories.source.toolkit.fluxcd.io created
customresourcedefinition.apiextensions.k8s.io/helmcharts.source.toolkit.fluxcd.io created
customresourcedefinition.apiextensions.k8s.io/helmreleases.helm.toolkit.fluxcd.io created
customresourcedefinition.apiextensions.k8s.io/helmrepositories.source.toolkit.fluxcd.io created
customresourcedefinition.apiextensions.k8s.io/kustomizations.kustomize.toolkit.fluxcd.io created
customresourcedefinition.apiextensions.k8s.io/providers.notification.toolkit.fluxcd.io created
customresourcedefinition.apiextensions.k8s.io/receivers.notification.toolkit.fluxcd.io created
serviceaccount/helm-controller created
serviceaccount/kustomize-controller created
serviceaccount/notification-controller created
serviceaccount/source-controller created
clusterrole.rbac.authorization.k8s.io/crd-controller-flux-system created
clusterrolebinding.rbac.authorization.k8s.io/cluster-reconciler-flux-system created
clusterrolebinding.rbac.authorization.k8s.io/crd-controller-flux-system created
service/notification-controller created
service/source-controller created
service/webhook-receiver created
deployment.apps/helm-controller created
deployment.apps/kustomize-controller created
deployment.apps/notification-controller created
deployment.apps/source-controller created
networkpolicy.networking.k8s.io/allow-egress created
networkpolicy.networking.k8s.io/allow-scraping created
networkpolicy.networking.k8s.io/allow-webhooks created
deployment.apps/helm-controller condition met
deployment.apps/source-controller condition met
deployment.apps/kustomize-controller condition met
deployment.apps/notification-controller condition met
section_end:1634238939:00_deploy_flux.sh

section_start:1634238939:01_deploy_bigbang.sh[collapsed=true]
01_deploy_bigbang.sh
+ trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR
+ [[ '' == \m\a\s\t\e\r ]]
+ [[ ! -z '' ]]
+ [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ all-packages ]]
+ IFS=,
+ for package in $CI_MERGE_REQUEST_LABELS
++ yq e .addons.kiali.enabled tests/ci/k3d/values.yaml
+ '[' null == false ']'
+ for package in $CI_MERGE_REQUEST_LABELS
++ yq e '.addons.Package Sustainment.enabled' tests/ci/k3d/values.yaml
+ '[' '' == false ']'
+ for package in $CI_MERGE_REQUEST_LABELS
++ yq e .addons.priority::3.enabled tests/ci/k3d/values.yaml
+ '[' '- [{null: [[{null: 3}]]}]' == false ']'
+ for package in $CI_MERGE_REQUEST_LABELS
++ yq e .addons.status::doing.enabled tests/ci/k3d/values.yaml
+ '[' '' == false ']'
+ for package in $CI_MERGE_REQUEST_LABELS
++ yq e .addons.team::core/security.enabled tests/ci/k3d/values.yaml
+ '[' '' == false ']'
++ yq e .addons.keycloak.enabled tests/ci/k3d/values.yaml
+ '[' false == true ']'
+ [[ merge_request_event == \s\c\h\e\d\u\l\e ]]
+ [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security = *\t\e\s\t\-\c\i\:\:\i\n\f\r\a* ]]
+ echo 'Installing BigBang with the following configurations:'
Installing BigBang with the following configurations:
+ cat tests/ci/k3d/values.yaml
hostname: bigbang.dev

flux:
  interval: 1m
  rollback:
    cleanupOnFail: false

networkPolicies:
  controlPlaneCidr: 172.16.0.0/12

logging:
  enabled: true
  values:
    elasticsearch:
      master:
        count: 1
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: .5
          limits: {}
        heap:
          min: 1g
          max: 1g
      data:
        count: 2
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: .5
          limits: {}
        heap:
          min: 1g
          max: 1g
    kibana:
      count: 1
    bbtests:
      # TODO: Connection refused on the script test currently
      # https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana/-/issues/39
      enabled: false
      cypress:
        artifacts: true
        envs:
          cypress_kibana_url: "https://kibana.bigbang.dev"
        secretEnvs:
          - name: cypress_elastic_password
            valueFrom:
              secretKeyRef:
                name: "logging-ek-es-elastic-user"
                key: elastic
      scripts:
        image: registry1.dso.mil/ironbank/stedolan/jq:1.6
        envs:
          elasticsearch_host: "https://{{ .Release.Name }}-es-http.{{ .Release.Namespace }}.svc.cluster.local:9200"
          desired_version: "{{ .Values.elasticsearch.version }}"
        secretEnvs:
          - name: ELASTIC_PASSWORD
            valueFrom:
              secretKeyRef:
                name: "logging-ek-es-elastic-user"
                key: elastic

fluentbit:
  values:
    securityContext:
      privileged: true
    bbtests:
      # TODO: Connection refused on the test currently
      # https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit/-/issues/18
      scripts:
        # Image commented out to disable the test since the BB Test Lib version being used doesn't have the enabled flag
        # image: registry1.dso.mil/ironbank/stedolan/jq:1.6
        envs:
          fluent_host: "http://{{ include \"fluent-bit.fullname\" . }}.{{ .Release.Namespace }}.svc.cluster.local:{{ .Values.service.port }}"
          desired_version: "{{ .Values.image.tag }}"

istio:
  enabled: true
  values:
    kiali:
      dashboard:
        auth:
          strategy: "anonymous"

jaeger:
  enabled: true
  values:
    bbtests:
      enabled: true
      cypress:
        artifacts: true
        envs:
          cypress_url: "https://tracing.bigbang.dev"

kiali:
  enabled: true
  values:
    cr:
      spec:
        auth:
          strategy: "anonymous"
    bbtests:
      enabled: true
      cypress:
        artifacts: true
        envs:
          cypress_url: 'https://kiali.bigbang.dev'

clusterAuditor:
  enabled: true
  values:
    resources:
      requests:
        cpu: 100m
        memory: .5Gi
      limits: {}

monitoring:
  enabled: true
  values:
    prometheus:
      prometheusSpec:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
    kube-state-metrics:
      resources:
        requests:
          cpu: 10m
          memory: 32Mi
        limits: {}
    prometheus-node-exporter:
      resources:
        requests:
          cpu: 100m
          memory: 30Mi
        limits: {}
    grafana:
      testFramework:
        enabled: false
      dashboards:
        default:
          k8s-deployment:
            gnetId: 741
            revision: 1
            datasource: Prometheus
      downloadDashboards:
        resources: 
          limits:
            cpu: 20m
            memory: 20Mi
          requests:
            cpu: 20m
            memory: 20Mi
      dashboardProviders:
        dashboardproviders.yaml:
          apiVersion: 1
          providers:
          - name: 'default'
            orgId: 1
            folder: ''
            type: file
            disableDeletion: false
            editable: true
            options:
              path: /var/lib/grafana/dashboards
    bbtests:
      enabled: true
      cypress:
        artifacts: true
        envs:
          cypress_prometheus_url: 'https://prometheus.bigbang.dev'
          cypress_grafana_url: 'https://grafana.bigbang.dev'
          cypress_alertmanager_url: 'https://alertmanager.bigbang.dev'

gatekeeper:
  enabled: true
  values:
    replicas: 1
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
      limits: {}
    violations:
      allowedCapabilities:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to not drop capabilities
          - istio-system/lb-port-.*
      allowedDockerRegistries:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to pull from public repos
          - istio-system/lb-port-.*
      allowedSecCompProfiles:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to have an undefined defined seccomp
          - istio-system/lb-port-.*
      allowedUsers:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to run as any user/group
          - istio-system/lb-port-.*
      containerRatio:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to have undefined limits/requests
          - istio-system/lb-port-.*
      hostNetworking:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to mount host ports
          - istio-system/lb-port-.*
      noBigContainers:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to have undefined limits/requests
          - istio-system/lb-port-.*
      noPrivilegedEscalation:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to have undefined security context
          - istio-system/lb-port-.*
      readOnlyRoot:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to mount filesystems read/write
          - istio-system/lb-port-.*
      requiredLabels:
        parameters:
          excludedResources:
          # Allows k3d load balancer pods to not have required labels
          - istio-system/svclb-.*
      requiredProbes:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to not have readiness/liveness probes
          - istio-system/lb-port-.*
    bbtests:
      # TODO: Test will need to be refactored at BB level to properly run since we can't turn everything to deny
      # https://repo1.dso.mil/platform-one/big-bang/apps/core/policy/-/issues/133
      enabled: false
      scripts:
        image: registry1.dso.mil/ironbank/opensource/kubernetes-1.21/kubectl:v1.21.1
        additionalVolumeMounts:
          - name: "{{ .Chart.Name }}-test-config"
            mountPath: /yaml
          - name: "{{ .Chart.Name }}-kube-cache"
            mountPath: /.kube/cache
        additionalVolumes:
          - name: "{{ .Chart.Name }}-test-config"
            configMap:
              name: "{{ .Chart.Name }}-test-config"
          - name: "{{ .Chart.Name }}-kube-cache"
            emptyDir: {}

twistlock:
  enabled: true
  values:
    console:
      persistence:
        size: 256Mi
    bbtests:
      enabled: true
      cypress:
        artifacts: true
        envs:
          cypress_baseUrl: "https://twistlock.bigbang.dev"
      scripts:
        image: registry1.dso.mil/ironbank/stedolan/jq:1.6
        envs:
          twistlock_host: "https://twistlock.bigbang.dev"
          desired_version: "{{ .Values.console.image.tag }}"

# Addons are toggled based on labels in CI
addons:
  argocd:
    enabled: false
    values:
      controller:
        resources:
          requests:
            cpu: 500m
            memory: 2Gi
          limits: {}
      dex:
        resources:
          requests:
            cpu: 10m
            memory: 128Mi
          limits: {}
      redis-bb:
        master:
          persistence:
            size: 256Mi
        replica:
          persistence:
            size: 256Mi
      redis:
        resources:
          requests:
            cpu: 50m
            memory: 64Mi
          limits: {}
      server:
        resources:
          requests:
            cpu: 20m
            memory: 128Mi
          limits: {}
      repoServer:
        resources:
          requests:
            cpu: 50m
            memory: 128Mi
          limits: {}
      configs:
        secret:
          argocdServerAdminPassword: '$2a$10$rUDZDckdDZ2TEwk9PDs3QuqjkL58qR1IHE1Kj4MwDx.7/m5dytZJm'
      bbtests:
        # TODO: Disabled pending resolution of some "timing?" issues
        # https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd/-/issues/17
        enabled: false
        cypress:
          artifacts: true
          envs:
            cypress_url: "https://argocd.bigbang.dev"
            cypress_user: "admin"
            cypress_password: "Password123"

  authservice:
    enabled: false
    chains:
      minimal:
        callback_uri: "https://minimal.bigbang.dev"
    values:
      resources:
        requests:
          cpu: 100m
          memory: 100Mi
        limits: {}
      redis:
        master:
          persistence:
            size: 256Mi
        replica:
          persistence:
            size: 256Mi

  gitlab:
    enabled: false
    sso:
      enabled: false
    flux:
      timeout: 20m
    values:
      global:
        rails:
          bootstrap:
            enabled: false
      gitlab-runner:
        resources:
          requests:
            cpu: 10m
          limits: {}
      gitlab:
        webservice:
          minReplicas: 1
          maxReplicas: 1
          helmTests:
            enabled: false
        sidekiq:
          minReplicas: 1
          maxReplicas: 1
        gitlab-shell:
          minReplicas: 1
          maxReplicas: 1
        gitaly:
          persistence:
            size: 256Mi
          resources:
            requests:
              cpu: 50m
            limits: {}
        shared-secrets:
          resources:
            requests:
              cpu: 10m
            limits: {}
        migrations:
          resources:
            requests:
              cpu: 10m
            limits: {}
        task-runner:
          persistence:
            size: 256Mi
          resources:
            requests:
              cpu: 10m
            limits: {}
      registry:
        hpa:
          minReplicas: 1
          maxReplicas: 1
      postgresql:
        persistence:
          size: 256Mi
        metrics:
          resources:
            requests:
              cpu: 10m
            limits: {}
      minio:
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: 50m
          limits: {}
      redis:
        master:
          persistence:
            size: 256Mi
        slave:
          persistence:
            size: 256Mi
      bbtests:
        enabled: true
        cypress:
          artifacts: true
          envs:
            cypress_baseUrl: https://gitlab.bigbang.dev
            cypress_gitlab_first_name: "test"
            cypress_gitlab_last_name: "user"
            cypress_gitlab_username: "testuser"
            cypress_gitlab_password: "12345678"
            cypress_gitlab_email: "testuser@example.com"
            cypress_gitlab_project: "my-awesome-project"
          secretEnvs:
            - name: cypress_adminpassword
              valueFrom:
                secretKeyRef:
                  name: gitlab-gitlab-initial-root-password
                  key: password
        scripts:
          image: "registry.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/bbtests:0.0.3"
          envs:
            GITLAB_USER: "testuser"
            GITLAB_PASS: "12345678"
            GITLAB_EMAIL: "testuser@example.com"
            GITLAB_PROJECT: "my-awesome-project"
            GITLAB_REPOSITORY: https://gitlab.bigbang.dev
            GITLAB_ORIGIN: https://testuser:12345678@gitlab.bigbang.dev
            GITLAB_REGISTRY: registry.bigbang.dev

  gitlabRunner:
    enabled: false
    values:
      resources:
        requests:
          memory: 64Mi
          cpu: 50m
        limits: {}
      runners:
        protected: false
      bbtests:
        # TODO: This test runs fine locally with the same values, but fails in CI
        enabled: false
        cypress:
          artifacts: true
          secretEnvs:
            - name: cypress_adminpassword
              valueFrom:
                secretKeyRef:
                  name: gitlab-gitlab-initial-root-password
                  key: password
          envs:
            cypress_baseUrl: "https://gitlab.bigbang.dev"
            cypress_gitlab_email: "gitlab@bigbang.dev"
            cypress_gitlab_user: "gitlab_user"
            cypress_gitlab_password: "gitlab_pass"
            cypress_gitlab_project: "hello-world"

  anchore:
    enabled: false
    values:
      ensureDbJobs:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      sso:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      postgresql:
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
        metrics:
          resources:
            requests:
              cpu: 100m
              memory: 200Mi
            limits: {}
      anchoreAnalyzer:
        replicaCount: 1
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreApi:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreCatalog:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchorePolicyEngine:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreSimpleQueue:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEngineUpgradeJob:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchore-feeds-db:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
        metrics:
          resources:
            requests:
              cpu: 100m
              memory: 200Mi
            limits: {}
      anchoreEnterpriseFeeds:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEnterpriseFeedsUpgradeJob:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEnterpriseRbac:
        authResources:
          resources:
            requests:
              cpu: 100m
              memory: 200Mi
            limits: {}
        managerResources:
          resources:
            requests:
              cpu: 100m
              memory: 200Mi
            limits: {}
      anchoreEnterpriseReports:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEnterpriseNotifications:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEntperpiseUi:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEnterpriseEngineUpgradeJob:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      bbtests:
        enabled: true
        scripts:
          image: registry1.dso.mil/ironbank/anchore/cli/cli:0.9.1
          envs:
            ANCHORE_CLI_URL: "https://anchore-api.bigbang.dev/v1"
            ANCHORE_CLI_USER: admin
          secretEnvs:
            - name: ANCHORE_CLI_PASS
              valueFrom:
                secretKeyRef:
                  name: "{{ template \"anchore-engine.fullname\" . }}-admin-pass"
                  key: ANCHORE_ADMIN_PASSWORD

  sonarqube:
    enabled: false
    values:
      plugins:
        install: []
      resources:
        requests:
          cpu: 100m
          memory: 200Mi
        limits: {}
      persistence:
        enabled: false
        size: 5Gi
      postgresql:
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      tests:
        enabled: false
      bbtests:
        enabled: true
        cypress:
          artifacts: true
          envs:
            cypress_url: "https://sonarqube.bigbang.dev"
            cypress_url_setup: "https://sonarqube.bigbang.dev/setup"
            cypress_user: "admin"
            cypress_password: "new_admin_password"
      account:
        adminPassword: new_admin_password
        currentAdminPassword: admin
      curlContainerImage: registry1.dso.mil/ironbank/big-bang/base:8.4

  minioOperator:
    enabled: false

  minio:
    enabled: false
    values:
      tenants:
        pools:
        - servers: 1
          volumesPerServer: 4
          size: 256Mi
          resources:
            requests:
              cpu: 250m
              memory: 2Gi
            limits:
              cpu: 250m
              memory: 2Gi
          securityContext:
            runAsUser: 1001
            runAsGroup: 1001
            fsGroup: 1001

      bbtests:
        # There have been intermittent failures of the tests in the past.   The issue is tracked in the below issue.
        # https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio/-/issues/7
        # This issue can be reopened if problems reappear.
        enabled: true
        cypress:
          artifacts: true
          envs:
            cypress_url: 'http://minio.bigbang.dev/login'
          secretEnvs:
            - name: cypress_secretkey
              valueFrom:
                secretKeyRef:
                  name: "{{ .Values.tenants.secrets.name }}"
                  key: secretkey
            - name: cypress_accesskey
              valueFrom:
                secretKeyRef:
                  name: "{{ .Values.tenants.secrets.name }}"
                  key: accesskey
        scripts:
          image: registry1.dso.mil/ironbank/opensource/minio/mc:RELEASE.2021-09-02T09-21-27Z
          envs:
            MINIO_PORT: '80'
            MINIO_HOST: 'http://minio'
          secretEnvs:
            - name: SECRET_KEY
              valueFrom:
                secretKeyRef:
                  name: "{{ .Values.tenants.secrets.name }}"
                  key: secretkey
            - name: ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: "{{ .Values.tenants.secrets.name }}"
                  key: accesskey

  mattermostoperator:
    enabled: false

  mattermost:
    enabled: false
    elasticsearch:
      enabled: true
    values:
      postgresql:
        persistence:
          size: 256Mi
      replicaCount: 1
      resources:
        requests:
          cpu: 100m
          memory: 128Mi
        limits: {}
      minio:
        tenants:
          pools:
          - servers: 1
            volumesPerServer: 4
            size: 256Mi
            resources:
              requests:
                cpu: 250m
                memory: 2Gi
              limits:
                cpu: 250m
                memory: 2Gi
            securityContext:
              runAsUser: 1001
              runAsGroup: 1001
              fsGroup: 1001
      bbtests:
        enabled: true
        cypress:
          artifacts: true
          envs:
            cypress_url: https://chat.bigbang.dev
            cypress_mm_email: "test@bigbang.dev"
            cypress_mm_user: "bigbang"
            cypress_mm_password: "Bigbang#123"

  nexus:
    enabled: false
    values:
      persistence:
        # Do NOT set this below 5Gi, nexus will fail to boot
        storageSize: 5Gi
      nexus:
      # https://help.sonatype.com/repomanager3/installation/system-requirements#SystemRequirements-JVMDirectMemory
        env:
          - name: install4jAddVmParams
            value: "-Xms500M -Xmx500M -XX:MaxDirectMemorySize=500M -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap"
        resources:
          requests:
            cpu: 100m
            memory: 1500Mi
      bbtests:
        # TODO: Disabled pending resolution of "timing?" issues
        # https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus/-/issues/9
        enabled: false
        cypress:
          artifacts: true
          envs:
            cypress_nexus_url: "https://nexus.bigbang.dev"
            cypress_nexus_user: "admin"
            cypress_nexus_pass_new: "new_admin_password"
          secretEnvs:
            - name: cypress_nexus_pass
              valueFrom:
                secretKeyRef:
                  name: nexus-repository-manager-secret
                  key: admin.password

  velero:
    enabled: false
    plugins:
    - aws
    values:
      serviceAccount:
        server:
          name: velero
      configuration:
        # minio uses s3 provider
        provider: aws
        backupStorageLocation:
          bucket: velero
          config: &minio-config
            region: velero
            insecureSkipTLSVerify: "true"
            s3ForcePathStyle: "true"
            s3Url: &minio-address https://minio.bigbang.dev
        volumeSnapshotLocation:
          provider: aws
          config:
            region: velero
      credentials:
        useSecret: true
        secretContents:
          cloud: |
            [default]
            aws_access_key_id = minio
            aws_secret_access_key = minio123
      bbtests:
        # TODO: Velero test is messy and times out running in BB CI
        # https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero/-/issues/9
        enabled: false
        scripts:
          image: registry1.dso.mil/ironbank/opensource/velero/velero:v1.6.0
          additionalVolumes:
            - name: transfer-kubectl
              emptyDir: {}
            - name: &yamlVolName yaml-configs
              configMap:
                name: "{{ .Chart.Name }}-backup-restore-files-config"
          additionalVolumeMounts:
            - name: transfer-kubectl
              mountPath: /usr/local/bin/kubectl
              subPath: kubectl
            - name: *yamlVolName
              mountPath: &yamlMountPath /yaml
          envs:
            MINIO_HOST: *minio-address
            TEST_YAML_DIR: *yamlMountPath
            MINIO_USER: minio
            MINIO_PASS: minio123
          secretEnvs:
            - name: NAMESPACE
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace

  keycloak:
    enabled: false
    ingress:
      gateway: "public"
    values:
      replicas: 1
      resources:
        requests:
          cpu: 10m
          memory: 16Mi
        limits: {}
      bbtests:
        enabled: true
        cypress:
          artifacts: true
          envs:
            cypress_url: "https://keycloak.bigbang.dev"
            cypress_username: "admin"
            cypress_password: "password"
      # Custom dev secret configuration
      secrets:
        env:
          stringData:
            CUSTOM_REGISTRATION_CONFIG: /opt/jboss/keycloak/customreg.yaml
            KEYCLOAK_IMPORT: /opt/jboss/keycloak/realm.json
            X509_CA_BUNDLE: /etc/x509/https/cas.pem
        certauthority:
          stringData:
            cas.pem: '{{ .Files.Get "resources/dev/dod_cas.pem" }}'
        customreg:
          stringData:
            customreg.yaml: '{{ .Files.Get "resources/dev/baby-yoda.yaml" }}'
        realm:
          stringData:
            realm.json: '{{ .Files.Get "resources/dev/baby-yoda.json" }}'
      extraVolumes: |-
        - name: certauthority
          secret:
            secretName: {{ include "keycloak.fullname" . }}-certauthority
        - name: customreg
          secret:
            secretName: {{ include "keycloak.fullname" . }}-customreg
        - name: realm
          secret:
            secretName: {{ include "keycloak.fullname" . }}-realm
      extraVolumeMounts: |-
        - name: certauthority
          mountPath: /etc/x509/https/cas.pem
          subPath: cas.pem
          readOnly: true
        - name: customreg
          mountPath: /opt/jboss/keycloak/customreg.yaml
          subPath: customreg.yaml
          readOnly: true
        - name: realm
          mountPath: /opt/jboss/keycloak/realm.json
          subPath: realm.json
          readOnly: true
      
      extraVolumeMountsBigBang:
        - name: tlscert
          mountPath: /etc/x509/https/tls.crt
          subPath: tls.crt
          readOnly: true
        - name: tlskey
          mountPath: /etc/x509/https/tls.key
          subPath: tls.key
          readOnly: true
+ helm upgrade -i bigbang chart -n bigbang --create-namespace --set 'registryCredentials[0].username=robot$bb-dev-imagepullonly' --set 'registryCredentials[0].password=[MASKED]' --set 'registryCredentials[0].registry=registry1.dso.mil' --set 'registryCredentials[1].username=[MASKED]' --set 'registryCredentials[1].password=[MASKED]' --set 'registryCredentials[1].registry=docker.io' -f tests/ci/k3d/values.yaml
Release "bigbang" does not exist. Installing it now.
NAME: bigbang
LAST DEPLOYED: Thu Oct 14 19:15:40 2021
NAMESPACE: bigbang
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
Thank you for supporting PlatformOne! 


DEPRECATION NOTICE:
  The top level yaml key "hostname" has been deprecated and replaced with "domain". 
  Please update your values override to use the "domain" key.
++ git branch --show-current
+ [[ master == \m\a\s\t\e\r ]]
+ echo 'Deploying secrets from the master branch'
Deploying secrets from the master branch
+ kubectl apply -f tests/ci/shared-secrets.yaml
secret/sops-gpg created
gitrepository.source.toolkit.fluxcd.io/secrets created
kustomization.kustomize.toolkit.fluxcd.io/secrets created
section_end:1634238940:01_deploy_bigbang.sh

section_start:1634238940:02_wait_for_helmreleases.sh[collapsed=true]
02_wait_for_helmreleases.sh
Found enabled helmreleases: gatekeeper istio-operator istio monitoring eck-operator ek fluent-bit twistlock cluster-auditor jaeger kiali
Waiting on GitRepositories
gitrepository.source.toolkit.fluxcd.io/fluentbit condition met
gitrepository.source.toolkit.fluxcd.io/monitoring condition met
gitrepository.source.toolkit.fluxcd.io/twistlock condition met
gitrepository.source.toolkit.fluxcd.io/istio-operator condition met
gitrepository.source.toolkit.fluxcd.io/elasticsearch-kibana condition met
gitrepository.source.toolkit.fluxcd.io/eck-operator condition met
gitrepository.source.toolkit.fluxcd.io/gatekeeper condition met
gitrepository.source.toolkit.fluxcd.io/cluster-auditor condition met
gitrepository.source.toolkit.fluxcd.io/istio-controlplane condition met
gitrepository.source.toolkit.fluxcd.io/jaeger condition met
gitrepository.source.toolkit.fluxcd.io/kiali condition met
gitrepository.source.toolkit.fluxcd.io/secrets condition met
Waiting for gatekeeper HR to exist
Waiting for istio-operator HR to exist
Waiting for istio HR to exist
Waiting for monitoring HR to exist
Waiting for eck-operator HR to exist
Waiting for ek HR to exist
Waiting for fluent-bit HR to exist
Waiting for twistlock HR to exist
Waiting for cluster-auditor HR to exist
Waiting for jaeger HR to exist
Waiting for kiali HR to exist
Waiting on helm releases...
All HR's deployed
Waiting for custom resources...
Checking for tests/wait.sh in istio:1.11.2-bb.0... 
found, running
Checking for tests/wait.sh in istiooperator:1.11.2-bb.0... not found
Checking for tests/wait.sh in jaeger:2.23.0-bb.3... 
found, running
jaeger custom resource creation finished
Checking for tests/wait.sh in kiali:1.39.0-bb.3... found, running
kiali custom resource creation finished
Checking for tests/wait.sh in clusterAuditor:0.3.0-bb.7... not found
Checking for tests/wait.sh in gatekeeper:3.6.0-bb.2... not found
Checking for tests/wait.sh in logging:0.1.21-bb.1... found, running
Checking for tests/wait.sh in eckoperator:1.7.1-bb.0... not found
Checking for tests/wait.sh in fluentbit:0.16.6-bb.0... not found
Checking for tests/wait.sh in monitoring:14.0.0-bb.11... 
not found
Checking for tests/wait.sh in twistlock:0.0.9-bb.0... not found
NAMESPACE   NAME                                                 READY   STATUS                             AGE
bigbang     helmrelease.helm.toolkit.fluxcd.io/gatekeeper        True    Release reconciliation succeeded   7m37s
bigbang     helmrelease.helm.toolkit.fluxcd.io/istio-operator    True    Release reconciliation succeeded   7m37s
bigbang     helmrelease.helm.toolkit.fluxcd.io/istio             True    Release reconciliation succeeded   7m37s
bigbang     helmrelease.helm.toolkit.fluxcd.io/eck-operator      True    Release reconciliation succeeded   7m37s
bigbang     helmrelease.helm.toolkit.fluxcd.io/ek                True    Release reconciliation succeeded   7m37s
bigbang     helmrelease.helm.toolkit.fluxcd.io/monitoring        True    Release reconciliation succeeded   7m37s
bigbang     helmrelease.helm.toolkit.fluxcd.io/fluent-bit        True    Release reconciliation succeeded   7m37s
bigbang     helmrelease.helm.toolkit.fluxcd.io/twistlock         True    Release reconciliation succeeded   7m37s
bigbang     helmrelease.helm.toolkit.fluxcd.io/jaeger            True    Release reconciliation succeeded   7m37s
bigbang     helmrelease.helm.toolkit.fluxcd.io/cluster-auditor   True    Release reconciliation succeeded   7m37s
bigbang     helmrelease.helm.toolkit.fluxcd.io/kiali             True    Release reconciliation succeeded   7m37s

NAMESPACE   NAME                                                READY   STATUS                                                              AGE
bigbang     kustomization.kustomize.toolkit.fluxcd.io/secrets   True    Applied revision: master/307e012d37245c9f48486404db0fbb58a7870445   7m37s

NAMESPACE   NAME                                                          URL                                                                              READY   STATUS                                                                    AGE
bigbang     gitrepository.source.toolkit.fluxcd.io/jaeger                 https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git                 True    Fetched revision: 2.23.0-bb.3/ecb95c9b9b7476c4b2d4397786753b445bf553e6    7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/kiali                  https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali.git                  True    Fetched revision: 1.39.0-bb.3/b9ca008362097530b1ec4f552cb08ed429a093c5    7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/fluentbit              https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git              True    Fetched revision: 0.16.6-bb.0/1d7f518333097e87ad5e7a4886444b69c81609e0    7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/monitoring             https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git             True    Fetched revision: 14.0.0-bb.11/3065f8ea564858211d36132bec072c45e32a1aaa   7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/twistlock              https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git    True    Fetched revision: 0.0.9-bb.0/9af87c17b08f02e38c7bcaf605c8f4d594e07a7d     7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/istio-operator         https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git         True    Fetched revision: 1.11.2-bb.0/adda883edce2c789e8ea3e8c815760f2af49c241    7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/elasticsearch-kibana   https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git   True    Fetched revision: 0.1.21-bb.1/3479de4301ff3e49403347afcb6ea4ceffcc16e4    7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/eck-operator           https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git           True    Fetched revision: 1.7.1-bb.0/97c489b2b094e64c04f84712110b0d01484f7417     7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/gatekeeper             https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git                 True    Fetched revision: 3.6.0-bb.2/2885f823302f49d5e7a193ab3cf4e0e3d7cfdc81     7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/istio-controlplane     https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git     True    Fetched revision: 1.11.2-bb.0/c3a2f56fc447c7e5818afe27fa13b3ccd0076338    7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/cluster-auditor        https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git        True    Fetched revision: 0.3.0-bb.7/2e4bb4379ea6beb937b521738044eae2cc83a9ba     7m37s
bigbang     gitrepository.source.toolkit.fluxcd.io/secrets                https://repo1.dso.mil/platform-one/big-bang/bigbang.git                          True    Fetched revision: master/307e012d37245c9f48486404db0fbb58a7870445         7m37s
Waiting on Secrets Kustomization
kustomization.kustomize.toolkit.fluxcd.io/secrets condition met
Waiting on all jobs, deployments, statefulsets, and daemonsets
section_end:1634239400:02_wait_for_helmreleases.sh

$ set -e # collapsed multi-line command
section_start:1634239400:01_virtualservices.sh[collapsed=true]
01_virtualservices.sh
Executing ./tests/tests/01_virtualservices.sh...
Checking 
****************************************
Begin curl prometheus.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to prometheus.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "prometheus.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x5573f58924a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: prometheus.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 302 
< content-type: text/html; charset=utf-8
< location: /graph
< date: Thu, 14 Oct 2021 19:23:20 GMT
< content-length: 29
< 
{ [29 bytes data]
* Connection #0 to host prometheus.bigbang.dev left intact
****************************************
End curl prometheus.bigbang.dev
****************************************
****************************************
Begin curl grafana.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to grafana.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "grafana.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x559617cfe4a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: grafana.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 302 
< cache-control: no-cache
< content-type: text/html; charset=utf-8
< expires: -1
< location: /login
< pragma: no-cache
< set-cookie: redirect_to=%2F; Path=/; HttpOnly; SameSite=Lax
< x-content-type-options: nosniff
< x-frame-options: deny
< x-xss-protection: 1; mode=block
< date: Thu, 14 Oct 2021 19:23:20 GMT
< content-length: 29
< 
{ [29 bytes data]
* Connection #0 to host grafana.bigbang.dev left intact
****************************************
End curl grafana.bigbang.dev
****************************************
****************************************
Begin curl alertmanager.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to alertmanager.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "alertmanager.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x563eb70474a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: alertmanager.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 200 
< accept-ranges: bytes
< cache-control: no-cache, no-store, must-revalidate
< content-length: 1314
< content-type: text/html; charset=utf-8
< expires: 0
< last-modified: Thu, 01 Jan 1970 00:00:01 GMT
< pragma: no-cache
< date: Thu, 14 Oct 2021 19:23:20 GMT
< 
{ [1314 bytes data]
* Connection #0 to host alertmanager.bigbang.dev left intact
****************************************
End curl alertmanager.bigbang.dev
****************************************
****************************************
Begin curl kibana.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to kibana.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "kibana.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x563d2ab304a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: kibana.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 302 
< location: /login?next=%2F
< kbn-name: logging-ek
< kbn-license-sig: 70ea2cbe5d7f9ce088905eb894994f9f79d9bedb54f59dbd6243938876f72282
< cache-control: private, no-cache, no-store, must-revalidate
< content-length: 0
< date: Thu, 14 Oct 2021 19:23:20 GMT
< 
{ [0 bytes data]
* Connection #0 to host kibana.bigbang.dev left intact
****************************************
End curl kibana.bigbang.dev
****************************************
****************************************
Begin curl twistlock.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to twistlock.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "twistlock.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x5648d55644a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: twistlock.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 200 
< accept-ranges: bytes
< content-length: 5514
< content-type: text/html; charset=utf-8
< last-modified: Mon, 21 Jun 2021 09:26:21 GMT
< strict-transport-security: max-age=31536000; includeSubDomains
< x-frame-options: DENY
< date: Thu, 14 Oct 2021 19:23:20 GMT
< 
{ [5514 bytes data]
* Connection #0 to host twistlock.bigbang.dev left intact
****************************************
End curl twistlock.bigbang.dev
****************************************
****************************************
Begin curl kiali.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to kiali.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "kiali.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x564cadb2e4a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: kiali.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 503 
< content-length: 19
< content-type: text/plain
< date: Thu, 14 Oct 2021 19:23:20 GMT
< 
{ [19 bytes data]
* Connection #0 to host kiali.bigbang.dev left intact
****************************************
End curl kiali.bigbang.dev
****************************************
****************************************
Begin curl tracing.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to tracing.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "tracing.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x5594558974a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: tracing.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 200 
< content-type: text/html; charset=utf-8
< vary: Accept-Encoding
< date: Thu, 14 Oct 2021 19:23:20 GMT
< 
{ [3276 bytes data]
* Connection #0 to host tracing.bigbang.dev left intact
****************************************
End curl tracing.bigbang.dev
****************************************
section_end:1634239400:01_virtualservices.sh

section_start:1634239400:02_non_ironbank.sh[collapsed=true]
02_non_ironbank.sh
Executing ./tests/tests/02_non_ironbank.sh...
Showing images not from ironbank:
None
section_end:1634239401:02_non_ironbank.sh

section_start:1634239401:03_helm_tests.sh[collapsed=true]
03_helm_tests.sh
Executing ./tests/tests/03_helm_tests.sh...
Setting up CoreDNS for VS resolution...
configmap/coredns patched
deployment.apps/coredns restarted
Waiting for deployment "coredns" rollout to finish: 0 of 1 updated replicas are available...
deployment "coredns" successfully rolled out
Running helm tests for eck-operator-eck-operator...
😞 No tests found for eck-operator-eck-operator
Running helm tests for gatekeeper-system-gatekeeper...
😞 No tests found for gatekeeper-system-gatekeeper
Running helm tests for istio-operator-istio-operator...
😞 No tests found for istio-operator-istio-operator
Running helm tests for istio-system-istio...
😞 No tests found for istio-system-istio
Running helm tests for jaeger-jaeger...
✅ All tests sucessful for jaeger-jaeger
Running helm tests for kiali-kiali...
✅ All tests sucessful for kiali-kiali
Running helm tests for logging-cluster-auditor...
😞 No tests found for logging-cluster-auditor
Running helm tests for logging-ek...
😞 No tests found for logging-ek
Running helm tests for logging-fluent-bit...
😞 No tests found for logging-fluent-bit
Running helm tests for monitoring-monitoring...
✅ All tests sucessful for monitoring-monitoring
Running helm tests for twistlock-twistlock...
✅ All tests sucessful for twistlock-twistlock
Finished running all helm tests.
✅ All helm tests run successfully.
section_end:1634239578:03_helm_tests.sh

$ echo "Upgrade Big Bang from ${CI_MERGE_REQUEST_SOURCE_BRANCH_NAME}"
Upgrade Big Bang from kiali-update-1.40.1
$ echo -e "\e[0Ksection_start:`date +%s`:git_upgrade[collapsed=true]\r\e[0K\e[33;1mGit Upgrade\e[37m"
section_start:1634239578:git_upgrade[collapsed=true]
Git Upgrade
$ git reset --hard && git clean -fd
HEAD is now at 307e012d Merge branch 'jasonkrause-master-patch-92150' into 'master'
Removing clusterAuditor.wait.sh
Removing eckoperator.wait.sh
Removing fluentbit.wait.sh
Removing gatekeeper.wait.sh
Removing istio.wait.sh
Removing istiooperator.wait.sh
Removing jaeger.wait.sh
Removing kiali.wait.sh
Removing logging.wait.sh
Removing monitoring.wait.sh
Removing newhosts
Removing test-artifacts/
Removing twistlock.wait.sh
$ git checkout ${CI_MERGE_REQUEST_SOURCE_BRANCH_NAME}
Switched to a new branch 'kiali-update-1.40.1'
Branch 'kiali-update-1.40.1' set up to track remote branch 'kiali-update-1.40.1' from 'origin'.
$ echo -e "\e[0Ksection_end:`date +%s`:git_upgrade\r\e[0K"
section_end:1634239578:git_upgrade

$ set -e # collapsed multi-line command
section_start:1634239578:00_deploy_flux.sh[collapsed=true]
00_deploy_flux.sh
+ trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR
+ ./scripts/install_flux.sh --registry-username 'robot$bb-dev-imagepullonly' --registry-password [MASKED] --registry-email bigbang@bigbang.dev
REGISTRY_URL: registry1.dso.mil
REGISTRY_USERNAME: robot$bb-dev-imagepullonly
Error from server (AlreadyExists): namespaces "flux-system" already exists
Creating secret private-registry in namespace flux-system
secret/private-registry configured
Installing flux from kustomization
namespace/flux-system unchanged
customresourcedefinition.apiextensions.k8s.io/alerts.notification.toolkit.fluxcd.io configured
customresourcedefinition.apiextensions.k8s.io/buckets.source.toolkit.fluxcd.io configured
customresourcedefinition.apiextensions.k8s.io/gitrepositories.source.toolkit.fluxcd.io configured
customresourcedefinition.apiextensions.k8s.io/helmcharts.source.toolkit.fluxcd.io configured
customresourcedefinition.apiextensions.k8s.io/helmreleases.helm.toolkit.fluxcd.io configured
customresourcedefinition.apiextensions.k8s.io/helmrepositories.source.toolkit.fluxcd.io configured
customresourcedefinition.apiextensions.k8s.io/kustomizations.kustomize.toolkit.fluxcd.io configured
customresourcedefinition.apiextensions.k8s.io/providers.notification.toolkit.fluxcd.io configured
customresourcedefinition.apiextensions.k8s.io/receivers.notification.toolkit.fluxcd.io configured
serviceaccount/helm-controller unchanged
serviceaccount/kustomize-controller unchanged
serviceaccount/notification-controller unchanged
serviceaccount/source-controller unchanged
clusterrole.rbac.authorization.k8s.io/crd-controller-flux-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/cluster-reconciler-flux-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/crd-controller-flux-system unchanged
service/notification-controller unchanged
service/source-controller unchanged
service/webhook-receiver unchanged
deployment.apps/helm-controller unchanged
deployment.apps/kustomize-controller unchanged
deployment.apps/notification-controller unchanged
deployment.apps/source-controller unchanged
networkpolicy.networking.k8s.io/allow-egress unchanged
networkpolicy.networking.k8s.io/allow-scraping unchanged
networkpolicy.networking.k8s.io/allow-webhooks unchanged
deployment.apps/helm-controller condition met
deployment.apps/source-controller condition met
deployment.apps/kustomize-controller condition met
deployment.apps/notification-controller condition met
section_end:1634239580:00_deploy_flux.sh

section_start:1634239580:01_deploy_bigbang.sh[collapsed=true]
01_deploy_bigbang.sh
+ trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR
+ [[ '' == \m\a\s\t\e\r ]]
+ [[ ! -z '' ]]
+ [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ all-packages ]]
+ IFS=,
+ for package in $CI_MERGE_REQUEST_LABELS
++ yq e .addons.kiali.enabled tests/ci/k3d/values.yaml
+ '[' null == false ']'
+ for package in $CI_MERGE_REQUEST_LABELS
++ yq e '.addons.Package Sustainment.enabled' tests/ci/k3d/values.yaml
+ '[' '' == false ']'
+ for package in $CI_MERGE_REQUEST_LABELS
++ yq e .addons.priority::3.enabled tests/ci/k3d/values.yaml
+ '[' '- [{null: [[{null: 3}]]}]' == false ']'
+ for package in $CI_MERGE_REQUEST_LABELS
++ yq e .addons.status::doing.enabled tests/ci/k3d/values.yaml
+ '[' '' == false ']'
+ for package in $CI_MERGE_REQUEST_LABELS
++ yq e .addons.team::core/security.enabled tests/ci/k3d/values.yaml
+ '[' '' == false ']'
++ yq e .addons.keycloak.enabled tests/ci/k3d/values.yaml
+ '[' false == true ']'
+ [[ merge_request_event == \s\c\h\e\d\u\l\e ]]
+ [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security = *\t\e\s\t\-\c\i\:\:\i\n\f\r\a* ]]
+ echo 'Installing BigBang with the following configurations:'
Installing BigBang with the following configurations:
+ cat tests/ci/k3d/values.yaml
hostname: bigbang.dev

flux:
  interval: 1m
  rollback:
    cleanupOnFail: false

networkPolicies:
  controlPlaneCidr: 172.16.0.0/12

logging:
  enabled: true
  values:
    elasticsearch:
      master:
        count: 1
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: .5
          limits: {}
        heap:
          min: 1g
          max: 1g
      data:
        count: 2
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: .5
          limits: {}
        heap:
          min: 1g
          max: 1g
    kibana:
      count: 1
    bbtests:
      # TODO: Connection refused on the script test currently
      # https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana/-/issues/39
      enabled: false
      cypress:
        artifacts: true
        envs:
          cypress_kibana_url: "https://kibana.bigbang.dev"
        secretEnvs:
          - name: cypress_elastic_password
            valueFrom:
              secretKeyRef:
                name: "logging-ek-es-elastic-user"
                key: elastic
      scripts:
        image: registry1.dso.mil/ironbank/stedolan/jq:1.6
        envs:
          elasticsearch_host: "https://{{ .Release.Name }}-es-http.{{ .Release.Namespace }}.svc.cluster.local:9200"
          desired_version: "{{ .Values.elasticsearch.version }}"
        secretEnvs:
          - name: ELASTIC_PASSWORD
            valueFrom:
              secretKeyRef:
                name: "logging-ek-es-elastic-user"
                key: elastic

fluentbit:
  values:
    securityContext:
      privileged: true
    bbtests:
      # TODO: Connection refused on the test currently
      # https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit/-/issues/18
      scripts:
        # Image commented out to disable the test since the BB Test Lib version being used doesn't have the enabled flag
        # image: registry1.dso.mil/ironbank/stedolan/jq:1.6
        envs:
          fluent_host: "http://{{ include \"fluent-bit.fullname\" . }}.{{ .Release.Namespace }}.svc.cluster.local:{{ .Values.service.port }}"
          desired_version: "{{ .Values.image.tag }}"

istio:
  enabled: true
  values:
    kiali:
      dashboard:
        auth:
          strategy: "anonymous"

jaeger:
  enabled: true
  values:
    bbtests:
      enabled: true
      cypress:
        artifacts: true
        envs:
          cypress_url: "https://tracing.bigbang.dev"

kiali:
  enabled: true
  values:
    cr:
      spec:
        auth:
          strategy: "anonymous"
    bbtests:
      enabled: true
      cypress:
        artifacts: true
        envs:
          cypress_url: 'https://kiali.bigbang.dev'

clusterAuditor:
  enabled: true
  values:
    resources:
      requests:
        cpu: 100m
        memory: .5Gi
      limits: {}

monitoring:
  enabled: true
  values:
    prometheus:
      prometheusSpec:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
    kube-state-metrics:
      resources:
        requests:
          cpu: 10m
          memory: 32Mi
        limits: {}
    prometheus-node-exporter:
      resources:
        requests:
          cpu: 100m
          memory: 30Mi
        limits: {}
    grafana:
      testFramework:
        enabled: false
      dashboards:
        default:
          k8s-deployment:
            gnetId: 741
            revision: 1
            datasource: Prometheus
      downloadDashboards:
        resources: 
          limits:
            cpu: 20m
            memory: 20Mi
          requests:
            cpu: 20m
            memory: 20Mi
      dashboardProviders:
        dashboardproviders.yaml:
          apiVersion: 1
          providers:
          - name: 'default'
            orgId: 1
            folder: ''
            type: file
            disableDeletion: false
            editable: true
            options:
              path: /var/lib/grafana/dashboards
    bbtests:
      enabled: true
      cypress:
        artifacts: true
        envs:
          cypress_prometheus_url: 'https://prometheus.bigbang.dev'
          cypress_grafana_url: 'https://grafana.bigbang.dev'
          cypress_alertmanager_url: 'https://alertmanager.bigbang.dev'

gatekeeper:
  enabled: true
  values:
    replicas: 1
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
      limits: {}
    violations:
      allowedCapabilities:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to not drop capabilities
          - istio-system/lb-port-.*
      allowedDockerRegistries:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to pull from public repos
          - istio-system/lb-port-.*
      allowedSecCompProfiles:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to have an undefined defined seccomp
          - istio-system/lb-port-.*
      allowedUsers:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to run as any user/group
          - istio-system/lb-port-.*
      containerRatio:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to have undefined limits/requests
          - istio-system/lb-port-.*
      hostNetworking:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to mount host ports
          - istio-system/lb-port-.*
      noBigContainers:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to have undefined limits/requests
          - istio-system/lb-port-.*
      noPrivilegedEscalation:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to have undefined security context
          - istio-system/lb-port-.*
      readOnlyRoot:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to mount filesystems read/write
          - istio-system/lb-port-.*
      requiredLabels:
        parameters:
          excludedResources:
          # Allows k3d load balancer pods to not have required labels
          - istio-system/svclb-.*
      requiredProbes:
        parameters:
          excludedResources:
          # Allows k3d load balancer containers to not have readiness/liveness probes
          - istio-system/lb-port-.*
    bbtests:
      # TODO: Test will need to be refactored at BB level to properly run since we can't turn everything to deny
      # https://repo1.dso.mil/platform-one/big-bang/apps/core/policy/-/issues/133
      enabled: false
      scripts:
        image: registry1.dso.mil/ironbank/opensource/kubernetes-1.21/kubectl:v1.21.1
        additionalVolumeMounts:
          - name: "{{ .Chart.Name }}-test-config"
            mountPath: /yaml
          - name: "{{ .Chart.Name }}-kube-cache"
            mountPath: /.kube/cache
        additionalVolumes:
          - name: "{{ .Chart.Name }}-test-config"
            configMap:
              name: "{{ .Chart.Name }}-test-config"
          - name: "{{ .Chart.Name }}-kube-cache"
            emptyDir: {}

twistlock:
  enabled: true
  values:
    console:
      persistence:
        size: 256Mi
    bbtests:
      enabled: true
      cypress:
        artifacts: true
        envs:
          cypress_baseUrl: "https://twistlock.bigbang.dev"
      scripts:
        image: registry1.dso.mil/ironbank/stedolan/jq:1.6
        envs:
          twistlock_host: "https://twistlock.bigbang.dev"
          desired_version: "{{ .Values.console.image.tag }}"

# Addons are toggled based on labels in CI
addons:
  argocd:
    enabled: false
    values:
      controller:
        resources:
          requests:
            cpu: 500m
            memory: 2Gi
          limits: {}
      dex:
        resources:
          requests:
            cpu: 10m
            memory: 128Mi
          limits: {}
      redis-bb:
        master:
          persistence:
            size: 256Mi
        replica:
          persistence:
            size: 256Mi
      redis:
        resources:
          requests:
            cpu: 50m
            memory: 64Mi
          limits: {}
      server:
        resources:
          requests:
            cpu: 20m
            memory: 128Mi
          limits: {}
      repoServer:
        resources:
          requests:
            cpu: 50m
            memory: 128Mi
          limits: {}
      configs:
        secret:
          argocdServerAdminPassword: '$2a$10$rUDZDckdDZ2TEwk9PDs3QuqjkL58qR1IHE1Kj4MwDx.7/m5dytZJm'
      bbtests:
        # TODO: Disabled pending resolution of some "timing?" issues
        # https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd/-/issues/17
        enabled: false
        cypress:
          artifacts: true
          envs:
            cypress_url: "https://argocd.bigbang.dev"
            cypress_user: "admin"
            cypress_password: "Password123"

  authservice:
    enabled: false
    chains:
      minimal:
        callback_uri: "https://minimal.bigbang.dev"
    values:
      resources:
        requests:
          cpu: 100m
          memory: 100Mi
        limits: {}
      redis:
        master:
          persistence:
            size: 256Mi
        replica:
          persistence:
            size: 256Mi

  gitlab:
    enabled: false
    sso:
      enabled: false
    flux:
      timeout: 20m
    values:
      global:
        rails:
          bootstrap:
            enabled: false
      gitlab-runner:
        resources:
          requests:
            cpu: 10m
          limits: {}
      gitlab:
        webservice:
          minReplicas: 1
          maxReplicas: 1
          helmTests:
            enabled: false
        sidekiq:
          minReplicas: 1
          maxReplicas: 1
        gitlab-shell:
          minReplicas: 1
          maxReplicas: 1
        gitaly:
          persistence:
            size: 256Mi
          resources:
            requests:
              cpu: 50m
            limits: {}
        shared-secrets:
          resources:
            requests:
              cpu: 10m
            limits: {}
        migrations:
          resources:
            requests:
              cpu: 10m
            limits: {}
        task-runner:
          persistence:
            size: 256Mi
          resources:
            requests:
              cpu: 10m
            limits: {}
      registry:
        hpa:
          minReplicas: 1
          maxReplicas: 1
      postgresql:
        persistence:
          size: 256Mi
        metrics:
          resources:
            requests:
              cpu: 10m
            limits: {}
      minio:
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: 50m
          limits: {}
      redis:
        master:
          persistence:
            size: 256Mi
        slave:
          persistence:
            size: 256Mi
      bbtests:
        enabled: true
        cypress:
          artifacts: true
          envs:
            cypress_baseUrl: https://gitlab.bigbang.dev
            cypress_gitlab_first_name: "test"
            cypress_gitlab_last_name: "user"
            cypress_gitlab_username: "testuser"
            cypress_gitlab_password: "12345678"
            cypress_gitlab_email: "testuser@example.com"
            cypress_gitlab_project: "my-awesome-project"
          secretEnvs:
            - name: cypress_adminpassword
              valueFrom:
                secretKeyRef:
                  name: gitlab-gitlab-initial-root-password
                  key: password
        scripts:
          image: "registry.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/bbtests:0.0.3"
          envs:
            GITLAB_USER: "testuser"
            GITLAB_PASS: "12345678"
            GITLAB_EMAIL: "testuser@example.com"
            GITLAB_PROJECT: "my-awesome-project"
            GITLAB_REPOSITORY: https://gitlab.bigbang.dev
            GITLAB_ORIGIN: https://testuser:12345678@gitlab.bigbang.dev
            GITLAB_REGISTRY: registry.bigbang.dev

  gitlabRunner:
    enabled: false
    values:
      resources:
        requests:
          memory: 64Mi
          cpu: 50m
        limits: {}
      runners:
        protected: false
      bbtests:
        # TODO: This test runs fine locally with the same values, but fails in CI
        enabled: false
        cypress:
          artifacts: true
          secretEnvs:
            - name: cypress_adminpassword
              valueFrom:
                secretKeyRef:
                  name: gitlab-gitlab-initial-root-password
                  key: password
          envs:
            cypress_baseUrl: "https://gitlab.bigbang.dev"
            cypress_gitlab_email: "gitlab@bigbang.dev"
            cypress_gitlab_user: "gitlab_user"
            cypress_gitlab_password: "gitlab_pass"
            cypress_gitlab_project: "hello-world"

  anchore:
    enabled: false
    values:
      ensureDbJobs:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      sso:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      postgresql:
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
        metrics:
          resources:
            requests:
              cpu: 100m
              memory: 200Mi
            limits: {}
      anchoreAnalyzer:
        replicaCount: 1
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreApi:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreCatalog:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchorePolicyEngine:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreSimpleQueue:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEngineUpgradeJob:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchore-feeds-db:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
        metrics:
          resources:
            requests:
              cpu: 100m
              memory: 200Mi
            limits: {}
      anchoreEnterpriseFeeds:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEnterpriseFeedsUpgradeJob:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEnterpriseRbac:
        authResources:
          resources:
            requests:
              cpu: 100m
              memory: 200Mi
            limits: {}
        managerResources:
          resources:
            requests:
              cpu: 100m
              memory: 200Mi
            limits: {}
      anchoreEnterpriseReports:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEnterpriseNotifications:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEntperpiseUi:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      anchoreEnterpriseEngineUpgradeJob:
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      bbtests:
        enabled: true
        scripts:
          image: registry1.dso.mil/ironbank/anchore/cli/cli:0.9.1
          envs:
            ANCHORE_CLI_URL: "https://anchore-api.bigbang.dev/v1"
            ANCHORE_CLI_USER: admin
          secretEnvs:
            - name: ANCHORE_CLI_PASS
              valueFrom:
                secretKeyRef:
                  name: "{{ template \"anchore-engine.fullname\" . }}-admin-pass"
                  key: ANCHORE_ADMIN_PASSWORD

  sonarqube:
    enabled: false
    values:
      plugins:
        install: []
      resources:
        requests:
          cpu: 100m
          memory: 200Mi
        limits: {}
      persistence:
        enabled: false
        size: 5Gi
      postgresql:
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: {}
      tests:
        enabled: false
      bbtests:
        enabled: true
        cypress:
          artifacts: true
          envs:
            cypress_url: "https://sonarqube.bigbang.dev"
            cypress_url_setup: "https://sonarqube.bigbang.dev/setup"
            cypress_user: "admin"
            cypress_password: "new_admin_password"
      account:
        adminPassword: new_admin_password
        currentAdminPassword: admin
      curlContainerImage: registry1.dso.mil/ironbank/big-bang/base:8.4

  minioOperator:
    enabled: false

  minio:
    enabled: false
    values:
      tenants:
        pools:
        - servers: 1
          volumesPerServer: 4
          size: 256Mi
          resources:
            requests:
              cpu: 250m
              memory: 2Gi
            limits:
              cpu: 250m
              memory: 2Gi
          securityContext:
            runAsUser: 1001
            runAsGroup: 1001
            fsGroup: 1001

      bbtests:
        # There have been intermittent failures of the tests in the past.   The issue is tracked in the below issue.
        # https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio/-/issues/7
        # This issue can be reopened if problems reappear.
        enabled: true
        cypress:
          artifacts: true
          envs:
            cypress_url: 'http://minio.bigbang.dev/login'
          secretEnvs:
            - name: cypress_secretkey
              valueFrom:
                secretKeyRef:
                  name: "{{ .Values.tenants.secrets.name }}"
                  key: secretkey
            - name: cypress_accesskey
              valueFrom:
                secretKeyRef:
                  name: "{{ .Values.tenants.secrets.name }}"
                  key: accesskey
        scripts:
          image: registry1.dso.mil/ironbank/opensource/minio/mc:RELEASE.2021-09-02T09-21-27Z
          envs:
            MINIO_PORT: '80'
            MINIO_HOST: 'http://minio'
          secretEnvs:
            - name: SECRET_KEY
              valueFrom:
                secretKeyRef:
                  name: "{{ .Values.tenants.secrets.name }}"
                  key: secretkey
            - name: ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: "{{ .Values.tenants.secrets.name }}"
                  key: accesskey

  mattermostoperator:
    enabled: false

  mattermost:
    enabled: false
    elasticsearch:
      enabled: true
    values:
      postgresql:
        persistence:
          size: 256Mi
      replicaCount: 1
      resources:
        requests:
          cpu: 100m
          memory: 128Mi
        limits: {}
      minio:
        tenants:
          pools:
          - servers: 1
            volumesPerServer: 4
            size: 256Mi
            resources:
              requests:
                cpu: 250m
                memory: 2Gi
              limits:
                cpu: 250m
                memory: 2Gi
            securityContext:
              runAsUser: 1001
              runAsGroup: 1001
              fsGroup: 1001
      bbtests:
        enabled: true
        cypress:
          artifacts: true
          envs:
            cypress_url: https://chat.bigbang.dev
            cypress_mm_email: "test@bigbang.dev"
            cypress_mm_user: "bigbang"
            cypress_mm_password: "Bigbang#123"

  nexus:
    enabled: false
    values:
      persistence:
        # Do NOT set this below 5Gi, nexus will fail to boot
        storageSize: 5Gi
      nexus:
      # https://help.sonatype.com/repomanager3/installation/system-requirements#SystemRequirements-JVMDirectMemory
        env:
          - name: install4jAddVmParams
            value: "-Xms500M -Xmx500M -XX:MaxDirectMemorySize=500M -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap"
        resources:
          requests:
            cpu: 100m
            memory: 1500Mi
      bbtests:
        # TODO: Disabled pending resolution of "timing?" issues
        # https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus/-/issues/9
        enabled: false
        cypress:
          artifacts: true
          envs:
            cypress_nexus_url: "https://nexus.bigbang.dev"
            cypress_nexus_user: "admin"
            cypress_nexus_pass_new: "new_admin_password"
          secretEnvs:
            - name: cypress_nexus_pass
              valueFrom:
                secretKeyRef:
                  name: nexus-repository-manager-secret
                  key: admin.password

  velero:
    enabled: false
    plugins:
    - aws
    values:
      serviceAccount:
        server:
          name: velero
      configuration:
        # minio uses s3 provider
        provider: aws
        backupStorageLocation:
          bucket: velero
          config: &minio-config
            region: velero
            insecureSkipTLSVerify: "true"
            s3ForcePathStyle: "true"
            s3Url: &minio-address https://minio.bigbang.dev
        volumeSnapshotLocation:
          provider: aws
          config:
            region: velero
      credentials:
        useSecret: true
        secretContents:
          cloud: |
            [default]
            aws_access_key_id = minio
            aws_secret_access_key = minio123
      bbtests:
        # TODO: Velero test is messy and times out running in BB CI
        # https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero/-/issues/9
        enabled: false
        scripts:
          image: registry1.dso.mil/ironbank/opensource/velero/velero:v1.6.0
          additionalVolumes:
            - name: transfer-kubectl
              emptyDir: {}
            - name: &yamlVolName yaml-configs
              configMap:
                name: "{{ .Chart.Name }}-backup-restore-files-config"
          additionalVolumeMounts:
            - name: transfer-kubectl
              mountPath: /usr/local/bin/kubectl
              subPath: kubectl
            - name: *yamlVolName
              mountPath: &yamlMountPath /yaml
          envs:
            MINIO_HOST: *minio-address
            TEST_YAML_DIR: *yamlMountPath
            MINIO_USER: minio
            MINIO_PASS: minio123
          secretEnvs:
            - name: NAMESPACE
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace

  keycloak:
    enabled: false
    ingress:
      gateway: "public"
    values:
      replicas: 1
      resources:
        requests:
          cpu: 10m
          memory: 16Mi
        limits: {}
      bbtests:
        enabled: true
        cypress:
          artifacts: true
          envs:
            cypress_url: "https://keycloak.bigbang.dev"
            cypress_username: "admin"
            cypress_password: "password"
      # Custom dev secret configuration
      secrets:
        env:
          stringData:
            CUSTOM_REGISTRATION_CONFIG: /opt/jboss/keycloak/customreg.yaml
            KEYCLOAK_IMPORT: /opt/jboss/keycloak/realm.json
            X509_CA_BUNDLE: /etc/x509/https/cas.pem
        certauthority:
          stringData:
            cas.pem: '{{ .Files.Get "resources/dev/dod_cas.pem" }}'
        customreg:
          stringData:
            customreg.yaml: '{{ .Files.Get "resources/dev/baby-yoda.yaml" }}'
        realm:
          stringData:
            realm.json: '{{ .Files.Get "resources/dev/baby-yoda.json" }}'
      extraVolumes: |-
        - name: certauthority
          secret:
            secretName: {{ include "keycloak.fullname" . }}-certauthority
        - name: customreg
          secret:
            secretName: {{ include "keycloak.fullname" . }}-customreg
        - name: realm
          secret:
            secretName: {{ include "keycloak.fullname" . }}-realm
      extraVolumeMounts: |-
        - name: certauthority
          mountPath: /etc/x509/https/cas.pem
          subPath: cas.pem
          readOnly: true
        - name: customreg
          mountPath: /opt/jboss/keycloak/customreg.yaml
          subPath: customreg.yaml
          readOnly: true
        - name: realm
          mountPath: /opt/jboss/keycloak/realm.json
          subPath: realm.json
          readOnly: true
      
      extraVolumeMountsBigBang:
        - name: tlscert
          mountPath: /etc/x509/https/tls.crt
          subPath: tls.crt
          readOnly: true
        - name: tlskey
          mountPath: /etc/x509/https/tls.key
          subPath: tls.key
          readOnly: true
+ helm upgrade -i bigbang chart -n bigbang --create-namespace --set 'registryCredentials[0].username=robot$bb-dev-imagepullonly' --set 'registryCredentials[0].password=[MASKED]' --set 'registryCredentials[0].registry=registry1.dso.mil' --set 'registryCredentials[1].username=[MASKED]' --set 'registryCredentials[1].password=[MASKED]' --set 'registryCredentials[1].registry=docker.io' -f tests/ci/k3d/values.yaml
Release "bigbang" has been upgraded. Happy Helming!
NAME: bigbang
LAST DEPLOYED: Thu Oct 14 19:26:20 2021
NAMESPACE: bigbang
STATUS: deployed
REVISION: 2
TEST SUITE: None
NOTES:
Thank you for supporting PlatformOne! 


DEPRECATION NOTICE:
  The top level yaml key "hostname" has been deprecated and replaced with "domain". 
  Please update your values override to use the "domain" key.
++ git branch --show-current
+ [[ kiali-update-1.40.1 == \m\a\s\t\e\r ]]
++ git branch --show-current
+ [[ kiali-update-1.40.1 == \m\a\s\t\e\r ]]
+ '[' -z '' ']'
+ echo 'Deploying secrets from the kiali-update-1.40.1 branch'
Deploying secrets from the kiali-update-1.40.1 branch
+ cat tests/ci/shared-secrets.yaml
+ sed 's|master|kiali-update-1.40.1|g'
+ kubectl apply -f -
secret/sops-gpg unchanged
gitrepository.source.toolkit.fluxcd.io/secrets configured
kustomization.kustomize.toolkit.fluxcd.io/secrets unchanged
section_end:1634239581:01_deploy_bigbang.sh

section_start:1634239581:02_wait_for_helmreleases.sh[collapsed=true]
02_wait_for_helmreleases.sh
Found enabled helmreleases: gatekeeper istio-operator istio monitoring eck-operator ek fluent-bit twistlock cluster-auditor jaeger kiali
Waiting on GitRepositories
gitrepository.source.toolkit.fluxcd.io/jaeger condition met
gitrepository.source.toolkit.fluxcd.io/fluentbit condition met
gitrepository.source.toolkit.fluxcd.io/monitoring condition met
gitrepository.source.toolkit.fluxcd.io/twistlock condition met
gitrepository.source.toolkit.fluxcd.io/istio-operator condition met
gitrepository.source.toolkit.fluxcd.io/elasticsearch-kibana condition met
gitrepository.source.toolkit.fluxcd.io/eck-operator condition met
gitrepository.source.toolkit.fluxcd.io/gatekeeper condition met
gitrepository.source.toolkit.fluxcd.io/istio-controlplane condition met
gitrepository.source.toolkit.fluxcd.io/cluster-auditor condition met
gitrepository.source.toolkit.fluxcd.io/kiali condition met
gitrepository.source.toolkit.fluxcd.io/secrets condition met
Waiting for gatekeeper HR to exist
Waiting for istio-operator HR to exist
Waiting for istio HR to exist
Waiting for monitoring HR to exist
Waiting for eck-operator HR to exist
Waiting for ek HR to exist
Waiting for fluent-bit HR to exist
Waiting for twistlock HR to exist
Waiting for cluster-auditor HR to exist
Waiting for jaeger HR to exist
Waiting for kiali HR to exist
Waiting on helm releases...
All HR's deployed
Waiting for custom resources...
Checking for tests/wait.sh in istio:1.11.2-bb.0... found, running
Checking for tests/wait.sh in istiooperator:1.11.2-bb.0... not found
Checking for tests/wait.sh in jaeger:2.23.0-bb.3... found, running
jaeger custom resource creation finished
Checking for tests/wait.sh in kiali:1.40.1-bb.0... found, running
kiali custom resource creation finished
Checking for tests/wait.sh in clusterAuditor:0.3.0-bb.7... not found
Checking for tests/wait.sh in gatekeeper:3.6.0-bb.2... not found
Checking for tests/wait.sh in logging:0.1.21-bb.1... found, running
Checking for tests/wait.sh in eckoperator:1.7.1-bb.0... not found
Checking for tests/wait.sh in fluentbit:0.16.6-bb.0... 
not found
Checking for tests/wait.sh in monitoring:14.0.0-bb.11... not found
Checking for tests/wait.sh in twistlock:0.0.9-bb.0... 
not found
NAMESPACE   NAME                                                 READY   STATUS                             AGE
bigbang     helmrelease.helm.toolkit.fluxcd.io/gatekeeper        True    Release reconciliation succeeded   12m
bigbang     helmrelease.helm.toolkit.fluxcd.io/istio-operator    True    Release reconciliation succeeded   12m
bigbang     helmrelease.helm.toolkit.fluxcd.io/istio             True    Release reconciliation succeeded   12m
bigbang     helmrelease.helm.toolkit.fluxcd.io/eck-operator      True    Release reconciliation succeeded   12m
bigbang     helmrelease.helm.toolkit.fluxcd.io/ek                True    Release reconciliation succeeded   12m
bigbang     helmrelease.helm.toolkit.fluxcd.io/monitoring        True    Release reconciliation succeeded   12m
bigbang     helmrelease.helm.toolkit.fluxcd.io/fluent-bit        True    Release reconciliation succeeded   12m
bigbang     helmrelease.helm.toolkit.fluxcd.io/twistlock         True    Release reconciliation succeeded   12m
bigbang     helmrelease.helm.toolkit.fluxcd.io/jaeger            True    Release reconciliation succeeded   12m
bigbang     helmrelease.helm.toolkit.fluxcd.io/cluster-auditor   True    Release reconciliation succeeded   12m
bigbang     helmrelease.helm.toolkit.fluxcd.io/kiali             True    Release reconciliation succeeded   12m

NAMESPACE   NAME                                                READY   STATUS                                                                           AGE
bigbang     kustomization.kustomize.toolkit.fluxcd.io/secrets   True    Applied revision: kiali-update-1.40.1/4f00a5a3ec83adc8080eee6ad9d911ef9708d6ff   12m

NAMESPACE   NAME                                                          URL                                                                              READY   STATUS                                                                           AGE
bigbang     gitrepository.source.toolkit.fluxcd.io/jaeger                 https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git                 True    Fetched revision: 2.23.0-bb.3/ecb95c9b9b7476c4b2d4397786753b445bf553e6           12m
bigbang     gitrepository.source.toolkit.fluxcd.io/fluentbit              https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git              True    Fetched revision: 0.16.6-bb.0/1d7f518333097e87ad5e7a4886444b69c81609e0           12m
bigbang     gitrepository.source.toolkit.fluxcd.io/monitoring             https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git             True    Fetched revision: 14.0.0-bb.11/3065f8ea564858211d36132bec072c45e32a1aaa          12m
bigbang     gitrepository.source.toolkit.fluxcd.io/twistlock              https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git    True    Fetched revision: 0.0.9-bb.0/9af87c17b08f02e38c7bcaf605c8f4d594e07a7d            12m
bigbang     gitrepository.source.toolkit.fluxcd.io/istio-operator         https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git         True    Fetched revision: 1.11.2-bb.0/adda883edce2c789e8ea3e8c815760f2af49c241           12m
bigbang     gitrepository.source.toolkit.fluxcd.io/elasticsearch-kibana   https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git   True    Fetched revision: 0.1.21-bb.1/3479de4301ff3e49403347afcb6ea4ceffcc16e4           12m
bigbang     gitrepository.source.toolkit.fluxcd.io/eck-operator           https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git           True    Fetched revision: 1.7.1-bb.0/97c489b2b094e64c04f84712110b0d01484f7417            12m
bigbang     gitrepository.source.toolkit.fluxcd.io/gatekeeper             https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git                 True    Fetched revision: 3.6.0-bb.2/2885f823302f49d5e7a193ab3cf4e0e3d7cfdc81            12m
bigbang     gitrepository.source.toolkit.fluxcd.io/istio-controlplane     https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git     True    Fetched revision: 1.11.2-bb.0/c3a2f56fc447c7e5818afe27fa13b3ccd0076338           12m
bigbang     gitrepository.source.toolkit.fluxcd.io/cluster-auditor        https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git        True    Fetched revision: 0.3.0-bb.7/2e4bb4379ea6beb937b521738044eae2cc83a9ba            12m
bigbang     gitrepository.source.toolkit.fluxcd.io/kiali                  https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali.git                  True    Fetched revision: 1.40.1-bb.0/9d5e3fcbcef67213849fb3658266a92637413eda           12m
bigbang     gitrepository.source.toolkit.fluxcd.io/secrets                https://repo1.dso.mil/platform-one/big-bang/bigbang.git                          True    Fetched revision: kiali-update-1.40.1/4f00a5a3ec83adc8080eee6ad9d911ef9708d6ff   12m
Waiting on Secrets Kustomization
kustomization.kustomize.toolkit.fluxcd.io/secrets condition met
Waiting on all jobs, deployments, statefulsets, and daemonsets
section_end:1634239666:02_wait_for_helmreleases.sh

$ set -e # collapsed multi-line command
section_start:1634239666:01_virtualservices.sh[collapsed=true]
01_virtualservices.sh
Executing ./tests/tests/01_virtualservices.sh...
Checking 
****************************************
Begin curl prometheus.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to prometheus.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "prometheus.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x5611d6eea4a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: prometheus.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 302 
< content-type: text/html; charset=utf-8
< location: /graph
< date: Thu, 14 Oct 2021 19:27:46 GMT
< content-length: 29
< 
{ [29 bytes data]
* Connection #0 to host prometheus.bigbang.dev left intact
****************************************
End curl prometheus.bigbang.dev
****************************************
****************************************
Begin curl grafana.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to grafana.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "grafana.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x5634cd2474a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: grafana.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 302 
< cache-control: no-cache
< content-type: text/html; charset=utf-8
< expires: -1
< location: /login
< pragma: no-cache
< set-cookie: redirect_to=%2F; Path=/; HttpOnly; SameSite=Lax
< x-content-type-options: nosniff
< x-frame-options: deny
< x-xss-protection: 1; mode=block
< date: Thu, 14 Oct 2021 19:27:46 GMT
< content-length: 29
< 
{ [29 bytes data]
* Connection #0 to host grafana.bigbang.dev left intact
****************************************
End curl grafana.bigbang.dev
****************************************
****************************************
Begin curl alertmanager.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to alertmanager.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "alertmanager.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x5589c89e54a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: alertmanager.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 200 
< accept-ranges: bytes
< cache-control: no-cache, no-store, must-revalidate
< content-length: 1314
< content-type: text/html; charset=utf-8
< expires: 0
< last-modified: Thu, 01 Jan 1970 00:00:01 GMT
< pragma: no-cache
< date: Thu, 14 Oct 2021 19:27:46 GMT
< 
{ [1314 bytes data]
* Connection #0 to host alertmanager.bigbang.dev left intact
****************************************
End curl alertmanager.bigbang.dev
****************************************
****************************************
Begin curl kibana.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to kibana.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "kibana.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x5579120024a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: kibana.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 302 
< location: /login?next=%2F
< kbn-name: logging-ek
< kbn-license-sig: 70ea2cbe5d7f9ce088905eb894994f9f79d9bedb54f59dbd6243938876f72282
< cache-control: private, no-cache, no-store, must-revalidate
< content-length: 0
< date: Thu, 14 Oct 2021 19:27:46 GMT
< 
{ [0 bytes data]
* Connection #0 to host kibana.bigbang.dev left intact
****************************************
End curl kibana.bigbang.dev
****************************************
****************************************
Begin curl twistlock.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to twistlock.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "twistlock.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x556e707a64a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: twistlock.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 200 
< accept-ranges: bytes
< content-length: 5514
< content-type: text/html; charset=utf-8
< last-modified: Mon, 21 Jun 2021 09:26:21 GMT
< strict-transport-security: max-age=31536000; includeSubDomains
< x-frame-options: DENY
< date: Thu, 14 Oct 2021 19:27:46 GMT
< 
{ [5514 bytes data]
* Connection #0 to host twistlock.bigbang.dev left intact
****************************************
End curl twistlock.bigbang.dev
****************************************
****************************************
Begin curl tracing.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to tracing.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "tracing.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x555b7e5a54a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: tracing.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 200 
< content-type: text/html; charset=utf-8
< vary: Accept-Encoding
< date: Thu, 14 Oct 2021 19:27:46 GMT
< 
{ [3276 bytes data]
* Connection #0 to host tracing.bigbang.dev left intact
****************************************
End curl tracing.bigbang.dev
****************************************
****************************************
Begin curl kiali.bigbang.dev
****************************************
*   Trying 172.20.0.2...
* TCP_NODELAY set
* Connected to kiali.bigbang.dev (172.20.0.2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [4024 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.bigbang.dev
*  start date: Sep 27 14:55:07 2021 GMT
*  expire date: Dec 26 14:55:06 2021 GMT
*  subjectAltName: host "kiali.bigbang.dev" matched cert's "*.bigbang.dev"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* Using Stream ID: 1 (easy handle 0x55571a2a94a0)
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
> GET / HTTP/2
> Host: kiali.bigbang.dev
> User-Agent: curl/7.61.1
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [230 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
} [5 bytes data]
* TLSv1.3 (OUT), TLS app data, [no content] (0):
} [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
* TLSv1.3 (IN), TLS app data, [no content] (0):
{ [1 bytes data]
< HTTP/2 503 
< content-length: 19
< content-type: text/plain
< date: Thu, 14 Oct 2021 19:27:46 GMT
< 
{ [19 bytes data]
* Connection #0 to host kiali.bigbang.dev left intact
****************************************
End curl kiali.bigbang.dev
****************************************
section_end:1634239666:01_virtualservices.sh

section_start:1634239666:02_non_ironbank.sh[collapsed=true]
02_non_ironbank.sh
Executing ./tests/tests/02_non_ironbank.sh...
Showing images not from ironbank:
      8 registry.dso.mil/platform-one/big-bang/pipeline-templates/pipeline-templates/cypress/kubectl:5.0.0
section_end:1634239666:02_non_ironbank.sh

section_start:1634239666:03_helm_tests.sh[collapsed=true]
03_helm_tests.sh
Executing ./tests/tests/03_helm_tests.sh...
Setting up CoreDNS for VS resolution...
configmap/coredns patched
deployment.apps/coredns restarted
Waiting for deployment "coredns" rollout to finish: 1 old replicas are pending termination...
Waiting for deployment "coredns" rollout to finish: 0 of 1 updated replicas are available...
deployment "coredns" successfully rolled out
Running helm tests for eck-operator-eck-operator...
😞 No tests found for eck-operator-eck-operator
Running helm tests for gatekeeper-system-gatekeeper...
😞 No tests found for gatekeeper-system-gatekeeper
Running helm tests for istio-operator-istio-operator...
😞 No tests found for istio-operator-istio-operator
Running helm tests for istio-system-istio...
😞 No tests found for istio-system-istio
Running helm tests for jaeger-jaeger...
✅ All tests sucessful for jaeger-jaeger
Running helm tests for kiali-kiali...
Error: pod kiali-operator-cypress-test failed
❌ One or more tests failed for kiali-kiali
---
Logs for kiali-operator-cypress-test:
---

====================================================================================================

  (Run Starting)

  ┌────────────────────────────────────────────────────────────────────────────────────────────────┐
  │ Cypress:    5.0.0                                                                              │
  │ Browser:    Chrome 83 (headless)                                                               │
  │ Specs:      1 found (kiali-health.spec.js)                                                     │
  └────────────────────────────────────────────────────────────────────────────────────────────────┘


────────────────────────────────────────────────────────────────────────────────────────────────────
                                                                                                    
  Running:  kiali-health.spec.js                                                            (1 of 1)
Browserslist: caniuse-lite is outdated. Please run:
npx browserslist@latest --update-db


  Basic Kiali
    1) Check Kiali UI is accessible


  0 passing (220ms)
  1 failing

  1) Basic Kiali
       Check Kiali UI is accessible:
     CypressError: `cy.visit()` failed trying to load:

https://kiali.bigbang.dev/

The response we received from your web server was:

  > 503: Service Unavailable

This was considered a failure because the status code was not `2xx`.

If you do not want status codes to cause failures pass the option: `failOnStatusCode: false`
      at http://localhost:45593/__cypress/runner/cypress_runner.js:157482:25
      at visitFailedByErr (http://localhost:45593/__cypress/runner/cypress_runner.js:156857:12)
      at http://localhost:45593/__cypress/runner/cypress_runner.js:157462:13
      at tryCatcher (http://localhost:45593/__cypress/runner/cypress_runner.js:9852:23)
      at Promise._settlePromiseFromHandler (http://localhost:45593/__cypress/runner/cypress_runner.js:7787:31)
      at Promise._settlePromise (http://localhost:45593/__cypress/runner/cypress_runner.js:7844:18)
      at Promise._settlePromise0 (http://localhost:45593/__cypress/runner/cypress_runner.js:7889:10)
      at Promise._settlePromises (http://localhost:45593/__cypress/runner/cypress_runner.js:7965:18)
      at _drainQueueStep (http://localhost:45593/__cypress/runner/cypress_runner.js:4559:12)
      at _drainQueue (http://localhost:45593/__cypress/runner/cypress_runner.js:4552:9)
      at Async.../../node_modules/bluebird/js/release/async.js.Async._drainQueues (http://localhost:45593/__cypress/runner/cypress_runner.js:4568:5)
      at Async.drainQueues (http://localhost:45593/__cypress/runner/cypress_runner.js:4438:14)
  From Your Spec Code:
      at Context.eval (http://localhost:45593/__cypress/tests?p=cypress/integration/kiali-health.spec.js:101:8)




  (Results)

  ┌────────────────────────────────────────────────────────────────────────────────────────────────┐
  │ Tests:        1                                                                                │
  │ Passing:      0                                                                                │
  │ Failing:      1                                                                                │
  │ Pending:      0                                                                                │
  │ Skipped:      0                                                                                │
  │ Screenshots:  1                                                                                │
  │ Video:        true                                                                             │
  │ Duration:     0 seconds                                                                        │
  │ Spec Ran:     kiali-health.spec.js                                                             │
  └────────────────────────────────────────────────────────────────────────────────────────────────┘


  (Screenshots)

  -  /test/cypress/screenshots/kiali-health.spec.js/Basic Kiali -- Check Kiali UI is      (1280x720)
     accessible (failed).png                                                                        


  (Video)

  -  Started processing:  Compressing to 32 CRF                                                     
  -  Finished processing: /test/cypress/videos/kiali-health.spec.js.mp4                  (0 seconds)


====================================================================================================

  (Run Finished)


       Spec                                              Tests  Passing  Failing  Pending  Skipped  
  ┌────────────────────────────────────────────────────────────────────────────────────────────────┐
  │ ✖  kiali-health.spec.js                     213ms        1        -        1        -        - │
  └────────────────────────────────────────────────────────────────────────────────────────────────┘
    ✖  1 of 1 failed (100%)                     213ms        1        -        1        -        -  

tar: Removing leading `/' from member names
configmap/cypress-screenshots created
tar: Removing leading `/' from member names
configmap/cypress-videos created
---
Running helm tests for logging-cluster-auditor...
😞 No tests found for logging-cluster-auditor
Running helm tests for logging-ek...
😞 No tests found for logging-ek
Running helm tests for logging-fluent-bit...
😞 No tests found for logging-fluent-bit
Running helm tests for monitoring-monitoring...
✅ All tests sucessful for monitoring-monitoring
Running helm tests for twistlock-twistlock...
✅ All tests sucessful for twistlock-twistlock
Finished running all helm tests.
❌ Encountered 1 package(s) with errors while running tests. See output logs for failed test(s) above and artifacts in the job.
./tests/tests/03_helm_tests.sh failed, see log output above and cluster debug.

section_end:1634239812:step_script
section_start:1634239812:after_script
Running after_script
Running after script...
$ echo -e "\e[0Ksection_start:`date +%s`:k3d_down[collapsed=true]\r\e[0K\e[33;1mK3D Cluster Delete\e[37m"
section_start:1634239812:k3d_down[collapsed=true]
K3D Cluster Delete
$ kubectl get all -A
NAMESPACE           NAME                                                            READY   STATUS      RESTARTS   AGE
kube-system         pod/metrics-server-86cbb8457f-tcd8k                             1/1     Running     0          14m
kube-system         pod/local-path-provisioner-5ff76fc89d-nmsxp                     1/1     Running     0          14m
flux-system         pod/notification-controller-585cd4cd84-fkwzv                    1/1     Running     0          14m
flux-system         pod/kustomize-controller-68b899d765-psw57                       1/1     Running     0          14m
flux-system         pod/source-controller-5995bc4d45-xql22                          1/1     Running     0          14m
flux-system         pod/helm-controller-66cd66c8c5-c2qp7                            1/1     Running     0          14m
gatekeeper-system   pod/gatekeeper-audit-846d6f8698-7lwzl                           1/1     Running     0          14m
gatekeeper-system   pod/gatekeeper-controller-manager-699848fb65-68wwt              1/1     Running     0          14m
istio-operator      pod/istio-operator-8576cc9b76-rhs6z                             1/1     Running     0          10m
istio-system        pod/istiod-5c877f8d5d-5wzm4                                     1/1     Running     0          10m
istio-system        pod/svclb-public-ingressgateway-28zsb                           3/3     Running     0          10m
istio-system        pod/public-ingressgateway-6db79654bc-t28rt                      1/1     Running     0          10m
monitoring          pod/monitoring-monitoring-kube-operator-5b95b955c4-q5fgs        1/1     Running     0          9m47s
monitoring          pod/monitoring-monitoring-prometheus-node-exporter-lzdlp        1/1     Running     0          9m47s
monitoring          pod/alertmanager-monitoring-monitoring-kube-alertmanager-0      2/2     Running     0          9m42s
monitoring          pod/prometheus-monitoring-monitoring-kube-prometheus-0          2/2     Running     1          9m42s
monitoring          pod/monitoring-monitoring-kube-state-metrics-66849b4bf6-j4lvb   1/1     Running     0          9m47s
monitoring          pod/monitoring-monitoring-grafana-7f757c7984-czjpl              2/2     Running     0          9m47s
eck-operator        pod/elastic-operator-0                                          2/2     Running     1          9m59s
logging             pod/logging-fluent-bit-bdm9p                                    2/2     Running     0          9m1s
twistlock           pod/twistlock-console-65c7694cb-nzs8n                           2/2     Running     0          9m
jaeger              pod/jaeger-jaeger-jaeger-operator-76f99ff6f4-gzwzk              2/2     Running     0          8m57s
logging             pod/logging-ek-es-data-1                                        2/2     Running     0          9m6s
logging             pod/logging-ek-es-data-0                                        2/2     Running     0          9m6s
logging             pod/logging-ek-es-master-0                                      2/2     Running     0          9m6s
logging             pod/opa-collector-8645dc559f-hnbqp                              2/2     Running     0          8m59s
logging             pod/logging-ek-kb-6cbdbb9b48-jrnbp                              2/2     Running     0          9m5s
jaeger              pod/jaeger-bdc64f9b4-sx5d7                                      2/2     Running     2          8m7s
kiali               pod/kiali-kiali-kiali-operator-6b9c4b46f6-j7vvt                 2/2     Running     2          3m50s
kube-system         pod/coredns-5f4c4c4747-q6rd8                                    1/1     Running     0          2m23s
jaeger              pod/jaeger-operator-cypress-test                                0/1     Completed   0          2m19s
kiali               pod/kiali-operator-cypress-test                                 0/1     Error       0          109s
monitoring          pod/kube-prometheus-stack-cypress-test                          0/1     Completed   0          97s
twistlock           pod/twistlock-cypress-test                                      0/1     Completed   0          71s
kiali               pod/kiali-7dc67dbdfb-xc9v7                                      2/2     Running     0          2m11s
twistlock           pod/twistlock-script-test                                       0/1     Completed   0          62s

NAMESPACE           NAME                                                         TYPE           CLUSTER-IP      EXTERNAL-IP   PORT(S)                                      AGE
default             service/kubernetes                                           ClusterIP      10.43.0.1       <none>        443/TCP                                      15m
kube-system         service/kube-dns                                             ClusterIP      10.43.0.10      <none>        53/UDP,53/TCP,9153/TCP                       15m
kube-system         service/metrics-server                                       ClusterIP      10.43.38.184    <none>        443/TCP                                      15m
flux-system         service/notification-controller                              ClusterIP      10.43.119.163   <none>        80/TCP                                       14m
flux-system         service/source-controller                                    ClusterIP      10.43.234.132   <none>        80/TCP                                       14m
flux-system         service/webhook-receiver                                     ClusterIP      10.43.118.80    <none>        80/TCP                                       14m
gatekeeper-system   service/gatekeeper-webhook-service                           ClusterIP      10.43.186.183   <none>        443/TCP                                      14m
istio-operator      service/istio-operator                                       ClusterIP      10.43.77.141    <none>        8383/TCP                                     10m
istio-system        service/istiod                                               ClusterIP      10.43.230.234   <none>        15010/TCP,15012/TCP,443/TCP,15014/TCP        10m
istio-system        service/public-ingressgateway                                LoadBalancer   10.43.72.170    172.20.0.2    15021:32008/TCP,80:31728/TCP,443:30595/TCP   10m
eck-operator        service/elastic-operator-webhook                             ClusterIP      10.43.250.199   <none>        443/TCP                                      9m59s
kube-system         service/monitoring-monitoring-kube-kube-etcd                 ClusterIP      None            <none>        2379/TCP                                     9m47s
kube-system         service/monitoring-monitoring-kube-kube-scheduler            ClusterIP      None            <none>        10251/TCP                                    9m47s
kube-system         service/monitoring-monitoring-kube-kube-controller-manager   ClusterIP      None            <none>        10252/TCP                                    9m47s
kube-system         service/monitoring-monitoring-kube-kube-proxy                ClusterIP      None            <none>        10249/TCP                                    9m47s
kube-system         service/monitoring-monitoring-kube-coredns                   ClusterIP      None            <none>        9153/TCP                                     9m47s
monitoring          service/monitoring-monitoring-kube-prometheus                ClusterIP      10.43.25.94     <none>        9090/TCP                                     9m47s
monitoring          service/monitoring-monitoring-kube-state-metrics             ClusterIP      10.43.143.246   <none>        8080/TCP                                     9m47s
monitoring          service/monitoring-monitoring-prometheus-node-exporter       ClusterIP      10.43.57.179    <none>        9100/TCP                                     9m47s
monitoring          service/monitoring-monitoring-grafana                        ClusterIP      10.43.101.196   <none>        80/TCP                                       9m47s
monitoring          service/monitoring-monitoring-kube-alertmanager              ClusterIP      10.43.73.149    <none>        9093/TCP                                     9m47s
monitoring          service/monitoring-monitoring-kube-operator                  ClusterIP      10.43.42.120    <none>        443/TCP                                      9m47s
kube-system         service/monitoring-monitoring-kube-kubelet                   ClusterIP      None            <none>        10250/TCP,10255/TCP,4194/TCP                 9m42s
monitoring          service/alertmanager-operated                                ClusterIP      None            <none>        9093/TCP,9094/TCP,9094/UDP                   9m42s
monitoring          service/prometheus-operated                                  ClusterIP      None            <none>        9090/TCP                                     9m42s
logging             service/logging-ek-es-transport                              ClusterIP      None            <none>        9300/TCP                                     9m8s
logging             service/logging-ek-es-http                                   ClusterIP      10.43.60.98     <none>        9200/TCP                                     9m8s
logging             service/logging-ek-kb-http                                   ClusterIP      10.43.90.92     <none>        5601/TCP                                     9m8s
logging             service/logging-ek-es-master                                 ClusterIP      None            <none>        9200/TCP                                     9m7s
logging             service/logging-ek-es-data                                   ClusterIP      None            <none>        9200/TCP                                     9m6s
logging             service/logging-fluent-bit                                   ClusterIP      10.43.168.194   <none>        2020/TCP                                     9m1s
twistlock           service/twistlock-console                                    ClusterIP      10.43.103.37    <none>        8084/TCP,8083/TCP,8081/TCP                   9m
jaeger              service/jaeger-jaeger-jaeger-operator-metrics                ClusterIP      10.43.141.162   <none>        8383/TCP,8686/TCP                            8m57s
jaeger              service/jaeger-collector-headless                            ClusterIP      None            <none>        9411/TCP,14250/TCP,14267/TCP,14268/TCP       8m8s
jaeger              service/jaeger-collector                                     ClusterIP      10.43.73.212    <none>        9411/TCP,14250/TCP,14267/TCP,14268/TCP       8m8s
jaeger              service/jaeger-query                                         ClusterIP      10.43.11.44     <none>        16686/TCP                                    8m8s
jaeger              service/jaeger-agent                                         ClusterIP      None            <none>        5775/UDP,5778/TCP,6831/UDP,6832/UDP          8m8s
kiali               service/kiali                                                ClusterIP      10.43.186.99    <none>        20001/TCP,9090/TCP                           7m40s

NAMESPACE      NAME                                                            DESIRED   CURRENT   READY   UP-TO-DATE   AVAILABLE   NODE SELECTOR   AGE
istio-system   daemonset.apps/svclb-public-ingressgateway                      1         1         1       1            1           <none>          10m
monitoring     daemonset.apps/monitoring-monitoring-prometheus-node-exporter   1         1         1       1            1           <none>          9m47s
logging        daemonset.apps/logging-fluent-bit                               1         1         1       1            1           <none>          9m1s

NAMESPACE           NAME                                                       READY   UP-TO-DATE   AVAILABLE   AGE
kube-system         deployment.apps/metrics-server                             1/1     1            1           15m
kube-system         deployment.apps/local-path-provisioner                     1/1     1            1           15m
flux-system         deployment.apps/notification-controller                    1/1     1            1           14m
flux-system         deployment.apps/kustomize-controller                       1/1     1            1           14m
flux-system         deployment.apps/source-controller                          1/1     1            1           14m
flux-system         deployment.apps/helm-controller                            1/1     1            1           14m
gatekeeper-system   deployment.apps/gatekeeper-audit                           1/1     1            1           14m
gatekeeper-system   deployment.apps/gatekeeper-controller-manager              1/1     1            1           14m
istio-operator      deployment.apps/istio-operator                             1/1     1            1           10m
istio-system        deployment.apps/istiod                                     1/1     1            1           10m
istio-system        deployment.apps/public-ingressgateway                      1/1     1            1           10m
monitoring          deployment.apps/monitoring-monitoring-kube-operator        1/1     1            1           9m47s
monitoring          deployment.apps/monitoring-monitoring-kube-state-metrics   1/1     1            1           9m47s
monitoring          deployment.apps/monitoring-monitoring-grafana              1/1     1            1           9m47s
twistlock           deployment.apps/twistlock-console                          1/1     1            1           9m
jaeger              deployment.apps/jaeger-jaeger-jaeger-operator              1/1     1            1           8m57s
logging             deployment.apps/opa-collector                              1/1     1            1           8m59s
logging             deployment.apps/logging-ek-kb                              1/1     1            1           9m6s
jaeger              deployment.apps/jaeger                                     1/1     1            1           8m7s
kiali               deployment.apps/kiali-kiali-kiali-operator                 1/1     1            1           8m58s
kube-system         deployment.apps/coredns                                    1/1     1            1           15m
kiali               deployment.apps/kiali                                      1/1     1            1           3m33s

NAMESPACE           NAME                                                                  DESIRED   CURRENT   READY   AGE
kube-system         replicaset.apps/metrics-server-86cbb8457f                             1         1         1       14m
kube-system         replicaset.apps/local-path-provisioner-5ff76fc89d                     1         1         1       14m
flux-system         replicaset.apps/notification-controller-585cd4cd84                    1         1         1       14m
flux-system         replicaset.apps/kustomize-controller-68b899d765                       1         1         1       14m
flux-system         replicaset.apps/source-controller-5995bc4d45                          1         1         1       14m
flux-system         replicaset.apps/helm-controller-66cd66c8c5                            1         1         1       14m
gatekeeper-system   replicaset.apps/gatekeeper-audit-846d6f8698                           1         1         1       14m
gatekeeper-system   replicaset.apps/gatekeeper-controller-manager-699848fb65              1         1         1       14m
istio-operator      replicaset.apps/istio-operator-8576cc9b76                             1         1         1       10m
istio-system        replicaset.apps/istiod-5c877f8d5d                                     1         1         1       10m
istio-system        replicaset.apps/public-ingressgateway-6db79654bc                      1         1         1       10m
monitoring          replicaset.apps/monitoring-monitoring-kube-operator-5b95b955c4        1         1         1       9m47s
monitoring          replicaset.apps/monitoring-monitoring-kube-state-metrics-66849b4bf6   1         1         1       9m47s
monitoring          replicaset.apps/monitoring-monitoring-grafana-7f757c7984              1         1         1       9m47s
twistlock           replicaset.apps/twistlock-console-65c7694cb                           1         1         1       9m
jaeger              replicaset.apps/jaeger-jaeger-jaeger-operator-76f99ff6f4              1         1         1       8m57s
logging             replicaset.apps/opa-collector-8645dc559f                              1         1         1       8m59s
logging             replicaset.apps/logging-ek-kb-6cbdbb9b48                              1         1         1       9m6s
jaeger              replicaset.apps/jaeger-bdc64f9b4                                      1         1         1       8m7s
kube-system         replicaset.apps/coredns-854c77959c                                    0         0         0       14m
kiali               replicaset.apps/kiali-kiali-kiali-operator-6b9c4b46f6                 1         1         1       3m50s
kiali               replicaset.apps/kiali-kiali-kiali-operator-687d466cf7                 0         0         0       8m58s
kube-system         replicaset.apps/coredns-6574758c95                                    0         0         0       6m49s
kube-system         replicaset.apps/coredns-5f4c4c4747                                    1         1         1       2m23s
kiali               replicaset.apps/kiali-574d484b54                                      0         0         0       3m33s
kiali               replicaset.apps/kiali-7dc67dbdfb                                      1         1         1       2m11s

NAMESPACE      NAME                                                                    READY   AGE
monitoring     statefulset.apps/alertmanager-monitoring-monitoring-kube-alertmanager   1/1     9m42s
monitoring     statefulset.apps/prometheus-monitoring-monitoring-kube-prometheus       1/1     9m42s
eck-operator   statefulset.apps/elastic-operator                                       1/1     9m59s
logging        statefulset.apps/logging-ek-es-data                                     2/2     9m6s
logging        statefulset.apps/logging-ek-es-master                                   1/1     9m6s

NAMESPACE      NAME                                                        REFERENCE                          TARGETS   MINPODS   MAXPODS   REPLICAS   AGE
istio-system   horizontalpodautoscaler.autoscaling/istiod                  Deployment/istiod                  0%/60%    1         3         1          10m
istio-system   horizontalpodautoscaler.autoscaling/public-ingressgateway   Deployment/public-ingressgateway   15%/80%   1         5         1          10m
$ kubectl get gitrepository,helmrelease,kustomizations -A
NAMESPACE   NAME                                                          URL                                                                              READY   STATUS                                                                           AGE
bigbang     gitrepository.source.toolkit.fluxcd.io/jaeger                 https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git                 True    Fetched revision: 2.23.0-bb.3/ecb95c9b9b7476c4b2d4397786753b445bf553e6           14m
bigbang     gitrepository.source.toolkit.fluxcd.io/fluentbit              https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git              True    Fetched revision: 0.16.6-bb.0/1d7f518333097e87ad5e7a4886444b69c81609e0           14m
bigbang     gitrepository.source.toolkit.fluxcd.io/monitoring             https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git             True    Fetched revision: 14.0.0-bb.11/3065f8ea564858211d36132bec072c45e32a1aaa          14m
bigbang     gitrepository.source.toolkit.fluxcd.io/twistlock              https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git    True    Fetched revision: 0.0.9-bb.0/9af87c17b08f02e38c7bcaf605c8f4d594e07a7d            14m
bigbang     gitrepository.source.toolkit.fluxcd.io/istio-operator         https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git         True    Fetched revision: 1.11.2-bb.0/adda883edce2c789e8ea3e8c815760f2af49c241           14m
bigbang     gitrepository.source.toolkit.fluxcd.io/elasticsearch-kibana   https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git   True    Fetched revision: 0.1.21-bb.1/3479de4301ff3e49403347afcb6ea4ceffcc16e4           14m
bigbang     gitrepository.source.toolkit.fluxcd.io/eck-operator           https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git           True    Fetched revision: 1.7.1-bb.0/97c489b2b094e64c04f84712110b0d01484f7417            14m
bigbang     gitrepository.source.toolkit.fluxcd.io/gatekeeper             https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git                 True    Fetched revision: 3.6.0-bb.2/2885f823302f49d5e7a193ab3cf4e0e3d7cfdc81            14m
bigbang     gitrepository.source.toolkit.fluxcd.io/istio-controlplane     https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git     True    Fetched revision: 1.11.2-bb.0/c3a2f56fc447c7e5818afe27fa13b3ccd0076338           14m
bigbang     gitrepository.source.toolkit.fluxcd.io/cluster-auditor        https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git        True    Fetched revision: 0.3.0-bb.7/2e4bb4379ea6beb937b521738044eae2cc83a9ba            14m
bigbang     gitrepository.source.toolkit.fluxcd.io/kiali                  https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali.git                  True    Fetched revision: 1.40.1-bb.0/9d5e3fcbcef67213849fb3658266a92637413eda           14m
bigbang     gitrepository.source.toolkit.fluxcd.io/secrets                https://repo1.dso.mil/platform-one/big-bang/bigbang.git                          True    Fetched revision: kiali-update-1.40.1/4f00a5a3ec83adc8080eee6ad9d911ef9708d6ff   14m

NAMESPACE   NAME                                                 READY   STATUS                             AGE
bigbang     helmrelease.helm.toolkit.fluxcd.io/gatekeeper        True    Release reconciliation succeeded   14m
bigbang     helmrelease.helm.toolkit.fluxcd.io/istio-operator    True    Release reconciliation succeeded   14m
bigbang     helmrelease.helm.toolkit.fluxcd.io/istio             True    Release reconciliation succeeded   14m
bigbang     helmrelease.helm.toolkit.fluxcd.io/eck-operator      True    Release reconciliation succeeded   14m
bigbang     helmrelease.helm.toolkit.fluxcd.io/ek                True    Release reconciliation succeeded   14m
bigbang     helmrelease.helm.toolkit.fluxcd.io/monitoring        True    Release reconciliation succeeded   14m
bigbang     helmrelease.helm.toolkit.fluxcd.io/fluent-bit        True    Release reconciliation succeeded   14m
bigbang     helmrelease.helm.toolkit.fluxcd.io/twistlock         True    Release reconciliation succeeded   14m
bigbang     helmrelease.helm.toolkit.fluxcd.io/jaeger            True    Release reconciliation succeeded   14m
bigbang     helmrelease.helm.toolkit.fluxcd.io/cluster-auditor   True    Release reconciliation succeeded   14m
bigbang     helmrelease.helm.toolkit.fluxcd.io/kiali             True    Release reconciliation succeeded   14m

NAMESPACE   NAME                                                READY   STATUS                                                                           AGE
bigbang     kustomization.kustomize.toolkit.fluxcd.io/secrets   True    Applied revision: kiali-update-1.40.1/4f00a5a3ec83adc8080eee6ad9d911ef9708d6ff   14m
$ k3d cluster delete ${CI_JOB_ID}
INFO[0000] Deleting cluster '7306903'                   
INFO[0000] Deleted k3d-7306903-serverlb                 
INFO[0012] Deleted k3d-7306903-server-0                 
INFO[0012] Deleting image volume 'k3d-7306903-images'   
INFO[0012] Removing cluster details from default kubeconfig... 
INFO[0012] Removing standalone kubeconfig file (if there is one)... 
INFO[0012] Successfully deleted cluster 7306903!        
$ docker network rm ${CI_JOB_ID}
7306903
$ echo -e "\e[0Ksection_end:`date +%s`:k3d_down\r\e[0K"
section_end:1634239825:k3d_down


section_end:1634239825:after_script
section_start:1634239825:upload_artifacts_on_failure
Uploading artifacts for failed job
Uploading artifacts...
test-artifacts/: found 23 matching files and directories 
Uploading artifacts as "archive" to coordinator... ok  id=7306903 responseStatus=201 Created token=xm5Ax-SY

section_end:1634239827:upload_artifacts_on_failure
section_start:1634239827:cleanup_file_variables
Cleaning up project directory and file based variables

section_end:1634239827:cleanup_file_variables
ERROR: Job failed: command terminated with exit code 123