[0KRunning with gitlab-runner 14.3.2 (e0218c92)[0;m [0K on gitlab-runners-bigbang-gitlab-runner-privileged-gitlab-runjsr58 RKphpr5_[0;m section_start:1634238876:resolve_secrets [0K[0K[36;1mResolving secrets[0;m[0;m section_end:1634238876:resolve_secrets [0Ksection_start:1634238876:prepare_executor [0K[0K[36;1mPreparing the "kubernetes" executor[0;m[0;m [0KUsing Kubernetes namespace: gitlab-runners[0;m [0KUsing Kubernetes executor with image registry.dso.mil/platform-one/big-bang/pipeline-templates/pipeline-templates/k8s-ci:v1.20.4-bb.3 ...[0;m [0KUsing attach strategy to execute scripts...[0;m section_end:1634238876:prepare_executor [0Ksection_start:1634238876:prepare_script [0K[0K[36;1mPreparing environment[0;m[0;m Waiting for pod gitlab-runners/runner-rkphpr5-project-2872-concurrent-0rbnp9 to be running, status is Pending ContainersNotReady: "containers with unready status: [build helper svc-0]" ContainersNotReady: "containers with unready status: [build helper svc-0]" Running on runner-rkphpr5-project-2872-concurrent-0rbnp9 via gitlab-runners-bigbang-gitlab-runner-privileged-gitlab-runjsr58... section_end:1634238883:prepare_script [0Ksection_start:1634238883:get_sources [0K[0K[36;1mGetting source from Git repository[0;m[0;m [32;1mFetching changes with git depth set to 50...[0;m hint: Using 'master' as the name for the initial branch. This default branch name hint: is subject to change. To configure the initial branch name to use in all hint: of your new repositories, which will suppress this warning, call: hint: hint: git config --global init.defaultBranch <name> hint: hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and hint: 'development'. The just-created branch can be renamed via this command: hint: hint: git branch -m <name> Initialized empty Git repository in /builds/RKphpr5_/0/platform-one/big-bang/bigbang/.git/ [32;1mCreated fresh repository.[0;m [32;1mChecking out 4f00a5a3 as refs/merge-requests/965/head...[0;m [32;1mSkipping Git submodules setup[0;m section_end:1634238885:get_sources [0Ksection_start:1634238885:step_script [0K[0K[36;1mExecuting "step_script" stage of the job script[0;m[0;m [32;1m$ echo -e "\e[0Ksection_start:`date +%s`:k3d_up[collapsed=true]\r\e[0K\e[33;1mK3D Cluster Create\e[37m"[0;m [0Ksection_start:1634238885:k3d_up[collapsed=true] [0K[33;1mK3D Cluster Create[37m [32;1m$ i=0; while [ "$i" -lt 12 ]; do docker info &>/dev/null && break; sleep 5; i=$(( i + 1 )) ; done[0;m [32;1m$ docker network create ${CI_JOB_ID} --driver=bridge -o "com.docker.network.driver.mtu"="1450" --subnet=172.20.0.0/16[0;m 6d483b10c03d163bc331911785f0a8d21636b7403bfbbd0701def13e722d750e [32;1m$ chmod +x tests/ci/k3d/deploy_k3d.sh; echo "Executing tests/ci/k3d/deploy_k3d.sh..."; ./tests/ci/k3d/deploy_k3d.sh[0;m Executing tests/ci/k3d/deploy_k3d.sh... + trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR + docker login -u [MASKED] -p [MASKED] WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /root/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded + [[ '' == \m\a\s\t\e\r ]] + [[ ! -z '' ]] + [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ keycloak ]] + [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ all-packages ]] + k3d cluster create 7306903 --config tests/ci/k3d/config.yaml --network 7306903 [36mINFO[0m[0000] Using config file tests/ci/k3d/config.yaml [36mINFO[0m[0000] Prep: Network [36mINFO[0m[0000] Network with name '7306903' already exists with ID '6d483b10c03d163bc331911785f0a8d21636b7403bfbbd0701def13e722d750e' [36mINFO[0m[0000] Created volume 'k3d-7306903-images' [36mINFO[0m[0001] Creating node 'k3d-7306903-server-0' [36mINFO[0m[0002] Pulling image 'docker.io/rancher/k3s:v1.20.4-k3s1' [36mINFO[0m[0004] Creating LoadBalancer 'k3d-7306903-serverlb' [36mINFO[0m[0005] Pulling image 'docker.io/rancher/k3d-proxy:v4.3.0' [36mINFO[0m[0007] Starting cluster '7306903' [36mINFO[0m[0007] Starting servers... [36mINFO[0m[0007] Starting Node 'k3d-7306903-server-0' [36mINFO[0m[0013] Starting agents... [36mINFO[0m[0013] Starting helpers... [36mINFO[0m[0013] Starting Node 'k3d-7306903-serverlb' [36mINFO[0m[0013] (Optional) Trying to get IP of the docker host and inject it into the cluster as 'host.k3d.internal' for easy access [36mINFO[0m[0013] Cluster '7306903' created successfully! [36mINFO[0m[0013] --kubeconfig-update-default=false --> sets --kubeconfig-switch-context=false [36mINFO[0m[0013] You can now use it like this: kubectl config use-context k3d-7306903 kubectl cluster-info [32;1m$ until kubectl get deployment coredns -n kube-system -o go-template='{{.status.availableReplicas}}' | grep -v -e '<no value>'; do sleep 1s; done[0;m Error from server (NotFound): deployments.apps "coredns" not found 1 [32;1m$ chmod +x tests/ci/k3d/metallb/install_metallb.sh; echo "Executing tests/ci/k3d/metallb/install_metallb.sh..."; ./tests/ci/k3d/metallb/install_metallb.sh[0;m Executing tests/ci/k3d/metallb/install_metallb.sh... + trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR + [[ '' == \m\a\s\t\e\r ]] + [[ ! -z '' ]] + [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ keycloak ]] + [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ all-packages ]] + echo 'Keycloak not present, Metallb will not be install' Keycloak not present, Metallb will not be install [32;1m$ kubectl get all -A[0;m NAMESPACE NAME READY STATUS RESTARTS AGE kube-system pod/metrics-server-86cbb8457f-tcd8k 1/1 Running 0 8s kube-system pod/local-path-provisioner-5ff76fc89d-nmsxp 1/1 Running 0 8s kube-system pod/coredns-854c77959c-7w66x 1/1 Running 0 8s NAMESPACE NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE default service/kubernetes ClusterIP 10.43.0.1 <none> 443/TCP 25s kube-system service/kube-dns ClusterIP 10.43.0.10 <none> 53/UDP,53/TCP,9153/TCP 23s kube-system service/metrics-server ClusterIP 10.43.38.184 <none> 443/TCP 23s NAMESPACE NAME READY UP-TO-DATE AVAILABLE AGE kube-system deployment.apps/metrics-server 1/1 1 1 23s kube-system deployment.apps/local-path-provisioner 1/1 1 1 23s kube-system deployment.apps/coredns 1/1 1 1 23s NAMESPACE NAME DESIRED CURRENT READY AGE kube-system replicaset.apps/metrics-server-86cbb8457f 1 1 1 9s kube-system replicaset.apps/local-path-provisioner-5ff76fc89d 1 1 1 9s kube-system replicaset.apps/coredns-854c77959c 1 1 1 9s [32;1m$ echo -e "\e[0Ksection_end:`date +%s`:k3d_up\r\e[0K"[0;m [0Ksection_end:1634238923:k3d_up [0K [32;1m$ echo "Install Big Bang from ${CI_MERGE_REQUEST_TARGET_BRANCH_NAME}"[0;m Install Big Bang from master [32;1m$ echo -e "\e[0Ksection_start:`date +%s`:git_master[collapsed=true]\r\e[0K\e[33;1mGit Fetch Master\e[37m"[0;m [0Ksection_start:1634238923:git_master[collapsed=true] [0K[33;1mGit Fetch Master[37m [32;1m$ git fetch && git checkout ${CI_MERGE_REQUEST_TARGET_BRANCH_NAME}[0;m From https://repo1.dso.mil/platform-one/big-bang/bigbang * [new branch] 1.12.0/valuefiles-patch -> origin/1.12.0/valuefiles-patch * [new branch] 1.12.1-valuefiles-patch -> origin/1.12.1-valuefiles-patch * [new branch] 141-add-documentation-for-bigbang-helm-values -> origin/141-add-documentation-for-bigbang-helm-values * [new branch] 145-add-additional-image-list-for-release -> origin/145-add-additional-image-list-for-release * [new branch] 183-gitlab-support-for-pages -> origin/183-gitlab-support-for-pages * [new branch] 194-fluent-bit-image-missing -> origin/194-fluent-bit-image-missing * [new branch] 240-introduce-capabilities-matrix-to-documentation -> origin/240-introduce-capabilities-matrix-to-documentation * [new branch] 253-release-pipeline-always-clones-from-main -> origin/253-release-pipeline-always-clones-from-main * [new branch] 282-minio-istio-defaults-to-enabled -> origin/282-minio-istio-defaults-to-enabled * [new branch] 295-document-gitlab-package-architecture-in-charter -> origin/295-document-gitlab-package-architecture-in-charter * [new branch] 302-document-minio-package-architecture-in-charter -> origin/302-document-minio-package-architecture-in-charter * [new branch] 408-kiali-custom-root-ca -> origin/408-kiali-custom-root-ca * [new branch] 42-feat-add-mattermost-as-bigbang-addon -> origin/42-feat-add-mattermost-as-bigbang-addon * [new branch] 492-publish-images-txt-for-individual-bb-components -> origin/492-publish-images-txt-for-individual-bb-components * [new branch] 497-keycloak-release -> origin/497-keycloak-release * [new branch] 528-add-ability-to-the-install_flux-sh-script-to-use-existing-registry-secret-if-it-exists -> origin/528-add-ability-to-the-install_flux-sh-script-to-use-existing-registry-secret-if-it-exists * [new branch] 549-all-packages-implementation -> origin/549-all-packages-implementation * [new branch] 549-testing-branch -> origin/549-testing-branch * [new branch] 561-update-codeowners-fluentbit -> origin/561-update-codeowners-fluentbit * [new branch] 571-nexus-dns-netpol-does-not-allow-port-5353-for-openshift -> origin/571-nexus-dns-netpol-does-not-allow-port-5353-for-openshift * [new branch] 572-anchore-dns-netpol-does-not-allow-port-5353-for-openshift -> origin/572-anchore-dns-netpol-does-not-allow-port-5353-for-openshift * [new branch] 599-monitoring-helmrelease-does-not-achieve-health -> origin/599-monitoring-helmrelease-does-not-achieve-health * [new branch] 601-unable-to-deploy-bigbang-when-deployed-over-an-ec2 -> origin/601-unable-to-deploy-bigbang-when-deployed-over-an-ec2 * [new branch] 647-logging-loki -> origin/647-logging-loki * [new branch] 647-logging-loki-riley -> origin/647-logging-loki-riley * [new branch] 653-flux-infinite -> origin/653-flux-infinite * [new branch] 659-no-cert -> origin/659-no-cert * [new branch] 698-eckoperator-bump -> origin/698-eckoperator-bump * [new branch] 715-gitlab-hostname-improvements -> origin/715-gitlab-hostname-improvements * [new branch] 719-retrospective-update-codeowners -> origin/719-retrospective-update-codeowners * [new branch] 758-add-support-for-gitlab-multipart -> origin/758-add-support-for-gitlab-multipart * [new branch] 79-pipelines-call-package-tests -> origin/79-pipelines-call-package-tests * [new branch] 80-prometheus-sso-not-working-2 -> origin/80-prometheus-sso-not-working-2 * [new branch] 813-authservice-sso-change -> origin/813-authservice-sso-change * [new branch] 813-kiali-jaeger-sso -> origin/813-kiali-jaeger-sso * [new branch] 833-gitlab-object-storage-use_iam_role -> origin/833-gitlab-object-storage-use_iam_role * [new branch] 835-docs-reseller -> origin/835-docs-reseller * [new branch] 836-need-to-add-retries-to-pre-var-stage -> origin/836-need-to-add-retries-to-pre-var-stage * [new branch] 838-docs-upstream -> origin/838-docs-upstream * [new branch] 839-doc-pipeline-integration -> origin/839-doc-pipeline-integration * [new branch] 842-docs-flux-integration -> origin/842-docs-flux-integration * [new branch] 843-docs-istio-integration -> origin/843-docs-istio-integration * [new branch] 850-docs-extra -> origin/850-docs-extra * [new branch] 851-docs-supported-integration -> origin/851-docs-supported-integration * [new branch] BB-1003 -> origin/BB-1003 * [new branch] BB-1073 -> origin/BB-1073 * [new branch] BB-1073-airgap -> origin/BB-1073-airgap * [new branch] BB-1073-airgap-ismail -> origin/BB-1073-airgap-ismail * [new branch] BB-1084 -> origin/BB-1084 * [new branch] BB-694 -> origin/BB-694 * [new branch] BB-857_8 -> origin/BB-857_8 * [new branch] BBOI-1007_keycloak_sso_quickstart -> origin/BBOI-1007_keycloak_sso_quickstart * [new branch] BBOI-435_data_flow_diagram -> origin/BBOI-435_data_flow_diagram * [new branch] BBOI-464_Network_Flow_Diagram -> origin/BBOI-464_Network_Flow_Diagram * [new branch] add-coder-charter -> origin/add-coder-charter * [new branch] add-kube-labels -> origin/add-kube-labels * [new branch] add-terraform-optional-secret -> origin/add-terraform-optional-secret * [new branch] addon/mysql -> origin/addon/mysql * [new branch] addons/keycloak -> origin/addons/keycloak * [new branch] airgap-BB-1073 -> origin/airgap-BB-1073 * [new branch] airgap-test-123 -> origin/airgap-test-123 * [new branch] airgapped-docs-update-suggestions -> origin/airgapped-docs-update-suggestions * [new branch] aks-defaults -> origin/aks-defaults * [new branch] anchore-upgrade -> origin/anchore-upgrade * [new branch] antora -> origin/antora * [new branch] argocd-istio-enabled-by-default -> origin/argocd-istio-enabled-by-default * [new branch] argocd-network-policy -> origin/argocd-network-policy * [new branch] argocd-tag-bump -> origin/argocd-tag-bump * [new branch] authservice-external-redis -> origin/authservice-external-redis * [new branch] authservice-for-kibana -> origin/authservice-for-kibana * [new branch] autoscaler-load-test -> origin/autoscaler-load-test * [new branch] bb-1173-jira-addon-2 -> origin/bb-1173-jira-addon-2 * [new branch] bb-1188/confluence -> origin/bb-1188/confluence * [new branch] bb-1203 -> origin/bb-1203 * [new branch] bb-1272 -> origin/bb-1272 * [new branch] bb-1287 -> origin/bb-1287 * [new branch] bb-16/postgres-operator -> origin/bb-16/postgres-operator * [new branch] bb-291-keycloak -> origin/bb-291-keycloak * [new branch] bb-628-dev-docs -> origin/bb-628-dev-docs * [new branch] bb-736 -> origin/bb-736 * [new branch] bb-751 -> origin/bb-751 * [new branch] bb-81 -> origin/bb-81 * [new branch] bb-843 -> origin/bb-843 * [new branch] bb-843-grafana -> origin/bb-843-grafana * [new branch] bb-844-2 -> origin/bb-844-2 * [new branch] bb-844-auth -> origin/bb-844-auth * [new branch] bb-848 -> origin/bb-848 * [new branch] bb-870 -> origin/bb-870 * [new branch] bigbang-json-schema -> origin/bigbang-json-schema * [new branch] blloyd-fluentbit-5353udp -> origin/blloyd-fluentbit-5353udp * [new branch] blloyd-fluentbit-ci-testing -> origin/blloyd-fluentbit-ci-testing * [new branch] blloyd-master-patch-12171 -> origin/blloyd-master-patch-12171 * [new branch] blloyd-minio-port5353 -> origin/blloyd-minio-port5353 * [new branch] branch-1.12.x -> origin/branch-1.12.x * [new branch] breakout-cicd-steps -> origin/breakout-cicd-steps * [new branch] bundle-jobs -> origin/bundle-jobs * [new branch] bundler -> origin/bundler * [new branch] charter-update-gabe -> origin/charter-update-gabe * [new branch] charter-update-jasonkrause -> origin/charter-update-jasonkrause * [new branch] cherry-pick-2e1bacb7 -> origin/cherry-pick-2e1bacb7 * [new branch] cherry-pick-6306ab9e -> origin/cherry-pick-6306ab9e * [new branch] cherry-pick-cfedd8c1 -> origin/cherry-pick-cfedd8c1 * [new branch] ci-environments -> origin/ci-environments * [new branch] ci/buildkit -> origin/ci/buildkit * [new branch] ci/infra-image -> origin/ci/infra-image * [new branch] ci/only-infra-on-schedule -> origin/ci/only-infra-on-schedule * [new branch] ci/rke2-stig -> origin/ci/rke2-stig * [new branch] ci/sizing -> origin/ci/sizing * [new branch] ci/skip-docs -> origin/ci/skip-docs * [new branch] ci/tester -> origin/ci/tester * [new branch] cluster-auditor-network-policies -> origin/cluster-auditor-network-policies * [new branch] cluster-auditor-prometheus -> origin/cluster-auditor-prometheus * [new branch] codeowners -> origin/codeowners * [new branch] coder-n-bigbang -> origin/coder-n-bigbang * [new branch] compliance -> origin/compliance * [new branch] cz-test -> origin/cz-test * [new branch] demo -> origin/demo * [new branch] deploy-mattermost -> origin/deploy-mattermost * [new branch] deploy-vault -> origin/deploy-vault * [new branch] dev-confluence -> origin/dev-confluence * [new branch] doc-arch-eckoperator-311 -> origin/doc-arch-eckoperator-311 * [new branch] doc-update -> origin/doc-update * [new branch] docs -> origin/docs * [new branch] docs-edge -> origin/docs-edge * [new branch] docs-edge-deployment -> origin/docs-edge-deployment * [new branch] docs-robk -> origin/docs-robk * [new branch] documentation/Deploy-Secrets -> origin/documentation/Deploy-Secrets * [new branch] dogfood -> origin/dogfood * [new branch] eck-operator-network-policies -> origin/eck-operator-network-policies * [new branch] ek39-logging-bb-ci -> origin/ek39-logging-bb-ci * [new branch] elastic-is-slow -> origin/elastic-is-slow * [new branch] enable-monitoring-istio-injection -> origin/enable-monitoring-istio-injection * [new branch] enhanced-testing -> origin/enhanced-testing * [new branch] feature/add-keycloak-repo -> origin/feature/add-keycloak-repo * [new branch] feature/authservice-google-auth-example -> origin/feature/authservice-google-auth-example * [new branch] feature/rothandrew-proposed-docs-updates -> origin/feature/rothandrew-proposed-docs-updates * [new branch] filmo003-master-patch-17332 -> origin/filmo003-master-patch-17332 * [new branch] filmo003-master-patch-66184 -> origin/filmo003-master-patch-66184 * [new branch] filmo003-master-patch-87347 -> origin/filmo003-master-patch-87347 * [new branch] fix/remove_interval_nxrm -> origin/fix/remove_interval_nxrm * [new branch] fix/remove_interval_nxrm-1.12.0 -> origin/fix/remove_interval_nxrm-1.12.0 * [new branch] fix/set-reasonable-flux-reqs -> origin/fix/set-reasonable-flux-reqs * [new branch] fluentd -> origin/fluentd * [new branch] flux-helm -> origin/flux-helm * [new branch] flux-https-patch -> origin/flux-https-patch * [new branch] gatekeeper-nps -> origin/gatekeeper-nps * [new branch] gatekeeper-remove-bigbang-overrides -> origin/gatekeeper-remove-bigbang-overrides * [new branch] gatekeeper-remove-disabled-constraints -> origin/gatekeeper-remove-disabled-constraints * [new branch] gitlab-runners -> origin/gitlab-runners * [new branch] gitpkg -> origin/gitpkg * [new branch] hardcoded-wildcard-affects-http-to-https-redirects-with-istio-gateways -> origin/hardcoded-wildcard-affects-http-to-https-redirects-with-istio-gateways * [new branch] hotfix/release-ci -> origin/hotfix/release-ci * [new branch] husky-v5 -> origin/husky-v5 * [new branch] issue-685-gatekeeper-metrics -> origin/issue-685-gatekeeper-metrics * [new branch] issue_587 -> origin/issue_587 * [new branch] istio-annotations -> origin/istio-annotations * [new branch] istio-operator-network-policy -> origin/istio-operator-network-policy * [new branch] istio-vs-consolodation -> origin/istio-vs-consolodation * [new branch] jasonkrause-master-patch-28584 -> origin/jasonkrause-master-patch-28584 * [new branch] json-schema -> origin/json-schema * [new branch] kenna-doc-hardened -> origin/kenna-doc-hardened * [new branch] kiali-jaeger-depends -> origin/kiali-jaeger-depends * [new branch] kiali-update-1.40.1 -> origin/kiali-update-1.40.1 * [new branch] killian.byrne-master-patch-54167 -> origin/killian.byrne-master-patch-54167 * [new branch] killian.byrne-master-patch-99227 -> origin/killian.byrne-master-patch-99227 * [new branch] kustomizestrategicmerge -> origin/kustomizestrategicmerge * [new branch] logging-affinity -> origin/logging-affinity * [new branch] machine-id -> origin/machine-id * [new branch] machinetests -> origin/machinetests * [new branch] master -> origin/master * [new branch] micah.nagel-master-patch-38375 -> origin/micah.nagel-master-patch-38375 * [new branch] micah.nagel-master-patch-49395 -> origin/micah.nagel-master-patch-49395 * [new branch] micah.nagel-master-patch-58087 -> origin/micah.nagel-master-patch-58087 * [new branch] micah.nagel-master-patch-69357 -> origin/micah.nagel-master-patch-69357 * [new branch] micah.nagel-master-patch-71988 -> origin/micah.nagel-master-patch-71988 * [new branch] micah.nagel-master-patch-76060 -> origin/micah.nagel-master-patch-76060 * [new branch] mm-istio-inject -> origin/mm-istio-inject * [new branch] mm-istio-sidecars -> origin/mm-istio-sidecars * [new branch] mm-operator-bug -> origin/mm-operator-bug * [new branch] nexus -> origin/nexus * [new branch] nexus-bump-reenable -> origin/nexus-bump-reenable * [new branch] nexus-role-mapping -> origin/nexus-role-mapping * [new branch] nexus-tag-bump -> origin/nexus-tag-bump * [new branch] nexus_random_secret -> origin/nexus_random_secret * [new branch] nosysctls-deny -> origin/nosysctls-deny * [new branch] optional-codeowners -> origin/optional-codeowners * [new branch] pass-labels -> origin/pass-labels * [new branch] patch-gitsecretname -> origin/patch-gitsecretname * [new branch] patch-updated-gitrepository-in-base -> origin/patch-updated-gitrepository-in-base * [new branch] pb-SDElements -> origin/pb-SDElements * [new branch] pb-jira -> origin/pb-jira * [new branch] pb-retrotool -> origin/pb-retrotool * [new branch] pin-umbrella -> origin/pin-umbrella * [new branch] pipeline-fixes -> origin/pipeline-fixes * [new branch] pipeline-structure -> origin/pipeline-structure * [new branch] pydio-cells -> origin/pydio-cells * [new branch] readme-linting -> origin/readme-linting * [new branch] release -> origin/release * [new branch] release-1.1 -> origin/release-1.1 * [new branch] release-1.10.x -> origin/release-1.10.x * [new branch] release-1.11.x -> origin/release-1.11.x * [new branch] release-1.12.x -> origin/release-1.12.x * [new branch] release-1.13.x -> origin/release-1.13.x * [new branch] release-1.14.x -> origin/release-1.14.x * [new branch] release-1.15.x -> origin/release-1.15.x * [new branch] release-1.16.x -> origin/release-1.16.x * [new branch] release-1.17.x -> origin/release-1.17.x * [new branch] release-1.18.x -> origin/release-1.18.x * [new branch] release-1.2.x -> origin/release-1.2.x * [new branch] release-1.3.x -> origin/release-1.3.x * [new branch] release-1.4.x -> origin/release-1.4.x * [new branch] release-1.5.0-changes -> origin/release-1.5.0-changes * [new branch] release-1.5.x -> origin/release-1.5.x * [new branch] release-1.6.x -> origin/release-1.6.x * [new branch] release-1.7.x -> origin/release-1.7.x * [new branch] release-1.8.x -> origin/release-1.8.x * [new branch] release-1.9.x -> origin/release-1.9.x * [new branch] release-job -> origin/release-job * [new branch] release-jobs -> origin/release-jobs * [new branch] remote-cluster -> origin/remote-cluster * [new branch] removecomment -> origin/removecomment * [new branch] resource-limits-gatekeeper-issue74-2 -> origin/resource-limits-gatekeeper-issue74-2 * [new branch] revert-1b509840 -> origin/revert-1b509840 * [new branch] rgarcia-helm-tests-2 -> origin/rgarcia-helm-tests-2 * [new branch] rkdevera-master-patch-75165 -> origin/rkdevera-master-patch-75165 * [new branch] rkdevera-master-patch-83497 -> origin/rkdevera-master-patch-83497 * [new branch] rkdevera-master-patch-97209 -> origin/rkdevera-master-patch-97209 * [new branch] rke2-pipeline -> origin/rke2-pipeline * [new branch] secret-for-thirdparty -> origin/secret-for-thirdparty * [new branch] semantic-test -> origin/semantic-test * [new branch] semantic-upgrade -> origin/semantic-upgrade * [new branch] sidt-1569-mv -> origin/sidt-1569-mv * [new branch] sonarqube-external-postgres -> origin/sonarqube-external-postgres * [new branch] sonarqube-tag -> origin/sonarqube-tag * [new branch] sops-test -> origin/sops-test * [new branch] sopstesting -> origin/sopstesting * [new branch] spdx -> origin/spdx * [new branch] staging -> origin/staging * [new branch] synkerpkg -> origin/synkerpkg * [new branch] temporary-branch-pending-release -> origin/temporary-branch-pending-release * [new branch] test-coder -> origin/test-coder * [new branch] test-coder-deployment -> origin/test-coder-deployment * [new branch] test-local -> origin/test-local * [new branch] test-manual-jobs -> origin/test-manual-jobs * [new branch] testing-documentation -> origin/testing-documentation * [new branch] tetrate_url -> origin/tetrate_url * [new branch] third-party-ux -> origin/third-party-ux * [new branch] tmp -> origin/tmp * [new branch] tst-ban-image-tags -> origin/tst-ban-image-tags * [new branch] update-gatekeeper-3.6.0 -> origin/update-gatekeeper-3.6.0 * [new branch] update-istio -> origin/update-istio * [new branch] update-pods-have-istio -> origin/update-pods-have-istio * [new branch] utility -> origin/utility * [new branch] vault -> origin/vault * [new branch] vault-dev -> origin/vault-dev * [new branch] velero-test -> origin/velero-test * [new branch] victor-test -> origin/victor-test * [new branch] workflow-example -> origin/workflow-example * [new tag] 1.1.2 -> 1.1.2 * [new tag] 1.10.1 -> 1.10.1 * [new tag] 1.11.0 -> 1.11.0 * [new tag] 1.11.0-rc.0 -> 1.11.0-rc.0 * [new tag] 1.12.0 -> 1.12.0 * [new tag] 1.12.0-rc.0 -> 1.12.0-rc.0 * [new tag] 1.12.1 -> 1.12.1 * [new tag] 1.12.1-rc.0 -> 1.12.1-rc.0 * [new tag] 1.13.1 -> 1.13.1 * [new tag] 1.14.1 -> 1.14.1 * [new tag] 1.14.1-rc.0 -> 1.14.1-rc.0 * [new tag] 1.15.3 -> 1.15.3 * [new tag] 1.16.2 -> 1.16.2 * [new tag] 1.16.2-rc.0 -> 1.16.2-rc.0 * [new tag] 1.17.0 -> 1.17.0 * [new tag] 1.2.0 -> 1.2.0 * [new tag] 1.2.0-rc1 -> 1.2.0-rc1 * [new tag] 1.3.0 -> 1.3.0 * [new tag] 1.3.0-rc.2 -> 1.3.0-rc.2 * [new tag] 1.4.0 -> 1.4.0 * [new tag] 1.5.0 -> 1.5.0 * [new tag] 1.6.2 -> 1.6.2 * [new tag] 1.7.0 -> 1.7.0 * [new tag] 1.7.0-rc.2 -> 1.7.0-rc.2 * [new tag] 1.8.1 -> 1.8.1 * [new tag] 1.8.1-rc.0 -> 1.8.1-rc.0 * [new tag] 1.9.1 -> 1.9.1 * [new tag] 1.9.1-rc.1 -> 1.9.1-rc.1 * [new tag] 0.0.1 -> 0.0.1 * [new tag] 0.0.2 -> 0.0.2 * [new tag] 1.0.0 -> 1.0.0 * [new tag] 1.0.0-rc.1 -> 1.0.0-rc.1 * [new tag] 1.0.0-rc.2 -> 1.0.0-rc.2 * [new tag] 1.0.1 -> 1.0.1 * [new tag] 1.0.2 -> 1.0.2 * [new tag] 1.0.4 -> 1.0.4 * [new tag] 1.0.6 -> 1.0.6 * [new tag] 1.0.7 -> 1.0.7 * [new tag] 1.1.0 -> 1.1.0 * [new tag] 1.1.1 -> 1.1.1 * [new tag] 1.1.1-rc1 -> 1.1.1-rc1 * [new tag] 1.10.0 -> 1.10.0 * [new tag] 1.10.0-rc.0 -> 1.10.0-rc.0 * [new tag] 1.10.0-rc.1 -> 1.10.0-rc.1 * [new tag] 1.10.0-rc.2 -> 1.10.0-rc.2 * [new tag] 1.13.0 -> 1.13.0 * [new tag] 1.13.0-rc.0 -> 1.13.0-rc.0 * [new tag] 1.13.1-rc.0 -> 1.13.1-rc.0 * [new tag] 1.13.1-rc.1 -> 1.13.1-rc.1 * [new tag] 1.14.0 -> 1.14.0 * [new tag] 1.14.0-rc.0 -> 1.14.0-rc.0 * [new tag] 1.15.0 -> 1.15.0 * [new tag] 1.15.0-rc.0 -> 1.15.0-rc.0 * [new tag] 1.15.1 -> 1.15.1 * [new tag] 1.15.1-rc.0 -> 1.15.1-rc.0 * [new tag] 1.15.2 -> 1.15.2 * [new tag] 1.15.2-rc.0 -> 1.15.2-rc.0 * [new tag] 1.15.3-rc.0 -> 1.15.3-rc.0 * [new tag] 1.16.0 -> 1.16.0 * [new tag] 1.16.0-rc.1 -> 1.16.0-rc.1 * [new tag] 1.16.1 -> 1.16.1 * [new tag] 1.16.1-rc.0 -> 1.16.1-rc.0 * [new tag] 1.17.0-rc.0 -> 1.17.0-rc.0 * [new tag] 1.17.0-rc.1 -> 1.17.0-rc.1 * [new tag] 1.17.0-rc.2 -> 1.17.0-rc.2 * [new tag] 1.18.0 -> 1.18.0 * [new tag] 1.18.0-rc.0 -> 1.18.0-rc.0 * [new tag] 1.18.0-rc.1 -> 1.18.0-rc.1 * [new tag] 1.18.0-rc.2 -> 1.18.0-rc.2 * [new tag] 1.18.0-rc.3 -> 1.18.0-rc.3 * [new tag] 1.18.0-rc.4 -> 1.18.0-rc.4 * [new tag] 1.3.0-rc.1 -> 1.3.0-rc.1 * [new tag] 1.4.0-rc.1 -> 1.4.0-rc.1 * [new tag] 1.5.0-rc.1 -> 1.5.0-rc.1 * [new tag] 1.6.0 -> 1.6.0 * [new tag] 1.6.0-rc.1 -> 1.6.0-rc.1 * [new tag] 1.6.1 -> 1.6.1 * [new tag] 1.7.0-rc.1 -> 1.7.0-rc.1 * [new tag] 1.8.0 -> 1.8.0 * [new tag] 1.8.0-rc.0 -> 1.8.0-rc.0 * [new tag] 1.8.0-rc.1 -> 1.8.0-rc.1 * [new tag] 1.8.0-rc.2 -> 1.8.0-rc.2 * [new tag] 1.9.0 -> 1.9.0 * [new tag] 1.9.0-rc.1 -> 1.9.0-rc.1 * [new tag] 1.9.0-rc.2 -> 1.9.0-rc.2 Previous HEAD position was 4f00a5a3 update Kiali tag to 1.40.1-bb.0 Switched to a new branch 'master' M tests/ci/k3d/deploy_k3d.sh M tests/ci/k3d/metallb/install_metallb.sh Branch 'master' set up to track remote branch 'master' from 'origin'. [32;1m$ echo -e "\e[0Ksection_end:`date +%s`:git_master\r\e[0K"[0;m [0Ksection_end:1634238924:git_master [0K [32;1m$ set -e # collapsed multi-line command[0;m [0Ksection_start:1634238924:00_deploy_flux.sh[collapsed=true] [0K[33;1m00_deploy_flux.sh[37m + trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR + ./scripts/install_flux.sh --registry-username 'robot$bb-dev-imagepullonly' --registry-password [MASKED] --registry-email bigbang@bigbang.dev REGISTRY_URL: registry1.dso.mil REGISTRY_USERNAME: robot$bb-dev-imagepullonly namespace/flux-system created Creating secret private-registry in namespace flux-system secret/private-registry created Installing flux from kustomization Warning: resource namespaces/flux-system is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically. namespace/flux-system configured customresourcedefinition.apiextensions.k8s.io/alerts.notification.toolkit.fluxcd.io created customresourcedefinition.apiextensions.k8s.io/buckets.source.toolkit.fluxcd.io created customresourcedefinition.apiextensions.k8s.io/gitrepositories.source.toolkit.fluxcd.io created customresourcedefinition.apiextensions.k8s.io/helmcharts.source.toolkit.fluxcd.io created customresourcedefinition.apiextensions.k8s.io/helmreleases.helm.toolkit.fluxcd.io created customresourcedefinition.apiextensions.k8s.io/helmrepositories.source.toolkit.fluxcd.io created customresourcedefinition.apiextensions.k8s.io/kustomizations.kustomize.toolkit.fluxcd.io created customresourcedefinition.apiextensions.k8s.io/providers.notification.toolkit.fluxcd.io created customresourcedefinition.apiextensions.k8s.io/receivers.notification.toolkit.fluxcd.io created serviceaccount/helm-controller created serviceaccount/kustomize-controller created serviceaccount/notification-controller created serviceaccount/source-controller created clusterrole.rbac.authorization.k8s.io/crd-controller-flux-system created clusterrolebinding.rbac.authorization.k8s.io/cluster-reconciler-flux-system created clusterrolebinding.rbac.authorization.k8s.io/crd-controller-flux-system created service/notification-controller created service/source-controller created service/webhook-receiver created deployment.apps/helm-controller created deployment.apps/kustomize-controller created deployment.apps/notification-controller created deployment.apps/source-controller created networkpolicy.networking.k8s.io/allow-egress created networkpolicy.networking.k8s.io/allow-scraping created networkpolicy.networking.k8s.io/allow-webhooks created deployment.apps/helm-controller condition met deployment.apps/source-controller condition met deployment.apps/kustomize-controller condition met deployment.apps/notification-controller condition met [0Ksection_end:1634238939:00_deploy_flux.sh [0K [0Ksection_start:1634238939:01_deploy_bigbang.sh[collapsed=true] [0K[33;1m01_deploy_bigbang.sh[37m + trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR + [[ '' == \m\a\s\t\e\r ]] + [[ ! -z '' ]] + [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ all-packages ]] + IFS=, + for package in $CI_MERGE_REQUEST_LABELS ++ yq e .addons.kiali.enabled tests/ci/k3d/values.yaml + '[' null == false ']' + for package in $CI_MERGE_REQUEST_LABELS ++ yq e '.addons.Package Sustainment.enabled' tests/ci/k3d/values.yaml + '[' '' == false ']' + for package in $CI_MERGE_REQUEST_LABELS ++ yq e .addons.priority::3.enabled tests/ci/k3d/values.yaml + '[' '- [{null: [[{null: 3}]]}]' == false ']' + for package in $CI_MERGE_REQUEST_LABELS ++ yq e .addons.status::doing.enabled tests/ci/k3d/values.yaml + '[' '' == false ']' + for package in $CI_MERGE_REQUEST_LABELS ++ yq e .addons.team::core/security.enabled tests/ci/k3d/values.yaml + '[' '' == false ']' ++ yq e .addons.keycloak.enabled tests/ci/k3d/values.yaml + '[' false == true ']' + [[ merge_request_event == \s\c\h\e\d\u\l\e ]] + [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security = *\t\e\s\t\-\c\i\:\:\i\n\f\r\a* ]] + echo 'Installing BigBang with the following configurations:' Installing BigBang with the following configurations: + cat tests/ci/k3d/values.yaml hostname: bigbang.dev flux: interval: 1m rollback: cleanupOnFail: false networkPolicies: controlPlaneCidr: 172.16.0.0/12 logging: enabled: true values: elasticsearch: master: count: 1 persistence: size: 256Mi resources: requests: cpu: .5 limits: {} heap: min: 1g max: 1g data: count: 2 persistence: size: 256Mi resources: requests: cpu: .5 limits: {} heap: min: 1g max: 1g kibana: count: 1 bbtests: # TODO: Connection refused on the script test currently # https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana/-/issues/39 enabled: false cypress: artifacts: true envs: cypress_kibana_url: "https://kibana.bigbang.dev" secretEnvs: - name: cypress_elastic_password valueFrom: secretKeyRef: name: "logging-ek-es-elastic-user" key: elastic scripts: image: registry1.dso.mil/ironbank/stedolan/jq:1.6 envs: elasticsearch_host: "https://{{ .Release.Name }}-es-http.{{ .Release.Namespace }}.svc.cluster.local:9200" desired_version: "{{ .Values.elasticsearch.version }}" secretEnvs: - name: ELASTIC_PASSWORD valueFrom: secretKeyRef: name: "logging-ek-es-elastic-user" key: elastic fluentbit: values: securityContext: privileged: true bbtests: # TODO: Connection refused on the test currently # https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit/-/issues/18 scripts: # Image commented out to disable the test since the BB Test Lib version being used doesn't have the enabled flag # image: registry1.dso.mil/ironbank/stedolan/jq:1.6 envs: fluent_host: "http://{{ include \"fluent-bit.fullname\" . }}.{{ .Release.Namespace }}.svc.cluster.local:{{ .Values.service.port }}" desired_version: "{{ .Values.image.tag }}" istio: enabled: true values: kiali: dashboard: auth: strategy: "anonymous" jaeger: enabled: true values: bbtests: enabled: true cypress: artifacts: true envs: cypress_url: "https://tracing.bigbang.dev" kiali: enabled: true values: cr: spec: auth: strategy: "anonymous" bbtests: enabled: true cypress: artifacts: true envs: cypress_url: 'https://kiali.bigbang.dev' clusterAuditor: enabled: true values: resources: requests: cpu: 100m memory: .5Gi limits: {} monitoring: enabled: true values: prometheus: prometheusSpec: resources: requests: cpu: 100m memory: 200Mi limits: {} kube-state-metrics: resources: requests: cpu: 10m memory: 32Mi limits: {} prometheus-node-exporter: resources: requests: cpu: 100m memory: 30Mi limits: {} grafana: testFramework: enabled: false dashboards: default: k8s-deployment: gnetId: 741 revision: 1 datasource: Prometheus downloadDashboards: resources: limits: cpu: 20m memory: 20Mi requests: cpu: 20m memory: 20Mi dashboardProviders: dashboardproviders.yaml: apiVersion: 1 providers: - name: 'default' orgId: 1 folder: '' type: file disableDeletion: false editable: true options: path: /var/lib/grafana/dashboards bbtests: enabled: true cypress: artifacts: true envs: cypress_prometheus_url: 'https://prometheus.bigbang.dev' cypress_grafana_url: 'https://grafana.bigbang.dev' cypress_alertmanager_url: 'https://alertmanager.bigbang.dev' gatekeeper: enabled: true values: replicas: 1 resources: requests: cpu: 100m memory: 256Mi limits: {} violations: allowedCapabilities: parameters: excludedResources: # Allows k3d load balancer containers to not drop capabilities - istio-system/lb-port-.* allowedDockerRegistries: parameters: excludedResources: # Allows k3d load balancer containers to pull from public repos - istio-system/lb-port-.* allowedSecCompProfiles: parameters: excludedResources: # Allows k3d load balancer containers to have an undefined defined seccomp - istio-system/lb-port-.* allowedUsers: parameters: excludedResources: # Allows k3d load balancer containers to run as any user/group - istio-system/lb-port-.* containerRatio: parameters: excludedResources: # Allows k3d load balancer containers to have undefined limits/requests - istio-system/lb-port-.* hostNetworking: parameters: excludedResources: # Allows k3d load balancer containers to mount host ports - istio-system/lb-port-.* noBigContainers: parameters: excludedResources: # Allows k3d load balancer containers to have undefined limits/requests - istio-system/lb-port-.* noPrivilegedEscalation: parameters: excludedResources: # Allows k3d load balancer containers to have undefined security context - istio-system/lb-port-.* readOnlyRoot: parameters: excludedResources: # Allows k3d load balancer containers to mount filesystems read/write - istio-system/lb-port-.* requiredLabels: parameters: excludedResources: # Allows k3d load balancer pods to not have required labels - istio-system/svclb-.* requiredProbes: parameters: excludedResources: # Allows k3d load balancer containers to not have readiness/liveness probes - istio-system/lb-port-.* bbtests: # TODO: Test will need to be refactored at BB level to properly run since we can't turn everything to deny # https://repo1.dso.mil/platform-one/big-bang/apps/core/policy/-/issues/133 enabled: false scripts: image: registry1.dso.mil/ironbank/opensource/kubernetes-1.21/kubectl:v1.21.1 additionalVolumeMounts: - name: "{{ .Chart.Name }}-test-config" mountPath: /yaml - name: "{{ .Chart.Name }}-kube-cache" mountPath: /.kube/cache additionalVolumes: - name: "{{ .Chart.Name }}-test-config" configMap: name: "{{ .Chart.Name }}-test-config" - name: "{{ .Chart.Name }}-kube-cache" emptyDir: {} twistlock: enabled: true values: console: persistence: size: 256Mi bbtests: enabled: true cypress: artifacts: true envs: cypress_baseUrl: "https://twistlock.bigbang.dev" scripts: image: registry1.dso.mil/ironbank/stedolan/jq:1.6 envs: twistlock_host: "https://twistlock.bigbang.dev" desired_version: "{{ .Values.console.image.tag }}" # Addons are toggled based on labels in CI addons: argocd: enabled: false values: controller: resources: requests: cpu: 500m memory: 2Gi limits: {} dex: resources: requests: cpu: 10m memory: 128Mi limits: {} redis-bb: master: persistence: size: 256Mi replica: persistence: size: 256Mi redis: resources: requests: cpu: 50m memory: 64Mi limits: {} server: resources: requests: cpu: 20m memory: 128Mi limits: {} repoServer: resources: requests: cpu: 50m memory: 128Mi limits: {} configs: secret: argocdServerAdminPassword: '$2a$10$rUDZDckdDZ2TEwk9PDs3QuqjkL58qR1IHE1Kj4MwDx.7/m5dytZJm' bbtests: # TODO: Disabled pending resolution of some "timing?" issues # https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd/-/issues/17 enabled: false cypress: artifacts: true envs: cypress_url: "https://argocd.bigbang.dev" cypress_user: "admin" cypress_password: "Password123" authservice: enabled: false chains: minimal: callback_uri: "https://minimal.bigbang.dev" values: resources: requests: cpu: 100m memory: 100Mi limits: {} redis: master: persistence: size: 256Mi replica: persistence: size: 256Mi gitlab: enabled: false sso: enabled: false flux: timeout: 20m values: global: rails: bootstrap: enabled: false gitlab-runner: resources: requests: cpu: 10m limits: {} gitlab: webservice: minReplicas: 1 maxReplicas: 1 helmTests: enabled: false sidekiq: minReplicas: 1 maxReplicas: 1 gitlab-shell: minReplicas: 1 maxReplicas: 1 gitaly: persistence: size: 256Mi resources: requests: cpu: 50m limits: {} shared-secrets: resources: requests: cpu: 10m limits: {} migrations: resources: requests: cpu: 10m limits: {} task-runner: persistence: size: 256Mi resources: requests: cpu: 10m limits: {} registry: hpa: minReplicas: 1 maxReplicas: 1 postgresql: persistence: size: 256Mi metrics: resources: requests: cpu: 10m limits: {} minio: persistence: size: 256Mi resources: requests: cpu: 50m limits: {} redis: master: persistence: size: 256Mi slave: persistence: size: 256Mi bbtests: enabled: true cypress: artifacts: true envs: cypress_baseUrl: https://gitlab.bigbang.dev cypress_gitlab_first_name: "test" cypress_gitlab_last_name: "user" cypress_gitlab_username: "testuser" cypress_gitlab_password: "12345678" cypress_gitlab_email: "testuser@example.com" cypress_gitlab_project: "my-awesome-project" secretEnvs: - name: cypress_adminpassword valueFrom: secretKeyRef: name: gitlab-gitlab-initial-root-password key: password scripts: image: "registry.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/bbtests:0.0.3" envs: GITLAB_USER: "testuser" GITLAB_PASS: "12345678" GITLAB_EMAIL: "testuser@example.com" GITLAB_PROJECT: "my-awesome-project" GITLAB_REPOSITORY: https://gitlab.bigbang.dev GITLAB_ORIGIN: https://testuser:12345678@gitlab.bigbang.dev GITLAB_REGISTRY: registry.bigbang.dev gitlabRunner: enabled: false values: resources: requests: memory: 64Mi cpu: 50m limits: {} runners: protected: false bbtests: # TODO: This test runs fine locally with the same values, but fails in CI enabled: false cypress: artifacts: true secretEnvs: - name: cypress_adminpassword valueFrom: secretKeyRef: name: gitlab-gitlab-initial-root-password key: password envs: cypress_baseUrl: "https://gitlab.bigbang.dev" cypress_gitlab_email: "gitlab@bigbang.dev" cypress_gitlab_user: "gitlab_user" cypress_gitlab_password: "gitlab_pass" cypress_gitlab_project: "hello-world" anchore: enabled: false values: ensureDbJobs: resources: requests: cpu: 100m memory: 200Mi limits: {} sso: resources: requests: cpu: 100m memory: 200Mi limits: {} postgresql: persistence: size: 256Mi resources: requests: cpu: 100m memory: 200Mi limits: {} metrics: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreAnalyzer: replicaCount: 1 resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreApi: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreCatalog: resources: requests: cpu: 100m memory: 200Mi limits: {} anchorePolicyEngine: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreSimpleQueue: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEngineUpgradeJob: resources: requests: cpu: 100m memory: 200Mi limits: {} anchore-feeds-db: resources: requests: cpu: 100m memory: 200Mi limits: {} metrics: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseFeeds: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseFeedsUpgradeJob: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseRbac: authResources: resources: requests: cpu: 100m memory: 200Mi limits: {} managerResources: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseReports: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseNotifications: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEntperpiseUi: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseEngineUpgradeJob: resources: requests: cpu: 100m memory: 200Mi limits: {} bbtests: enabled: true scripts: image: registry1.dso.mil/ironbank/anchore/cli/cli:0.9.1 envs: ANCHORE_CLI_URL: "https://anchore-api.bigbang.dev/v1" ANCHORE_CLI_USER: admin secretEnvs: - name: ANCHORE_CLI_PASS valueFrom: secretKeyRef: name: "{{ template \"anchore-engine.fullname\" . }}-admin-pass" key: ANCHORE_ADMIN_PASSWORD sonarqube: enabled: false values: plugins: install: [] resources: requests: cpu: 100m memory: 200Mi limits: {} persistence: enabled: false size: 5Gi postgresql: persistence: size: 256Mi resources: requests: cpu: 100m memory: 200Mi limits: {} tests: enabled: false bbtests: enabled: true cypress: artifacts: true envs: cypress_url: "https://sonarqube.bigbang.dev" cypress_url_setup: "https://sonarqube.bigbang.dev/setup" cypress_user: "admin" cypress_password: "new_admin_password" account: adminPassword: new_admin_password currentAdminPassword: admin curlContainerImage: registry1.dso.mil/ironbank/big-bang/base:8.4 minioOperator: enabled: false minio: enabled: false values: tenants: pools: - servers: 1 volumesPerServer: 4 size: 256Mi resources: requests: cpu: 250m memory: 2Gi limits: cpu: 250m memory: 2Gi securityContext: runAsUser: 1001 runAsGroup: 1001 fsGroup: 1001 bbtests: # There have been intermittent failures of the tests in the past. The issue is tracked in the below issue. # https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio/-/issues/7 # This issue can be reopened if problems reappear. enabled: true cypress: artifacts: true envs: cypress_url: 'http://minio.bigbang.dev/login' secretEnvs: - name: cypress_secretkey valueFrom: secretKeyRef: name: "{{ .Values.tenants.secrets.name }}" key: secretkey - name: cypress_accesskey valueFrom: secretKeyRef: name: "{{ .Values.tenants.secrets.name }}" key: accesskey scripts: image: registry1.dso.mil/ironbank/opensource/minio/mc:RELEASE.2021-09-02T09-21-27Z envs: MINIO_PORT: '80' MINIO_HOST: 'http://minio' secretEnvs: - name: SECRET_KEY valueFrom: secretKeyRef: name: "{{ .Values.tenants.secrets.name }}" key: secretkey - name: ACCESS_KEY valueFrom: secretKeyRef: name: "{{ .Values.tenants.secrets.name }}" key: accesskey mattermostoperator: enabled: false mattermost: enabled: false elasticsearch: enabled: true values: postgresql: persistence: size: 256Mi replicaCount: 1 resources: requests: cpu: 100m memory: 128Mi limits: {} minio: tenants: pools: - servers: 1 volumesPerServer: 4 size: 256Mi resources: requests: cpu: 250m memory: 2Gi limits: cpu: 250m memory: 2Gi securityContext: runAsUser: 1001 runAsGroup: 1001 fsGroup: 1001 bbtests: enabled: true cypress: artifacts: true envs: cypress_url: https://chat.bigbang.dev cypress_mm_email: "test@bigbang.dev" cypress_mm_user: "bigbang" cypress_mm_password: "Bigbang#123" nexus: enabled: false values: persistence: # Do NOT set this below 5Gi, nexus will fail to boot storageSize: 5Gi nexus: # https://help.sonatype.com/repomanager3/installation/system-requirements#SystemRequirements-JVMDirectMemory env: - name: install4jAddVmParams value: "-Xms500M -Xmx500M -XX:MaxDirectMemorySize=500M -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap" resources: requests: cpu: 100m memory: 1500Mi bbtests: # TODO: Disabled pending resolution of "timing?" issues # https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus/-/issues/9 enabled: false cypress: artifacts: true envs: cypress_nexus_url: "https://nexus.bigbang.dev" cypress_nexus_user: "admin" cypress_nexus_pass_new: "new_admin_password" secretEnvs: - name: cypress_nexus_pass valueFrom: secretKeyRef: name: nexus-repository-manager-secret key: admin.password velero: enabled: false plugins: - aws values: serviceAccount: server: name: velero configuration: # minio uses s3 provider provider: aws backupStorageLocation: bucket: velero config: &minio-config region: velero insecureSkipTLSVerify: "true" s3ForcePathStyle: "true" s3Url: &minio-address https://minio.bigbang.dev volumeSnapshotLocation: provider: aws config: region: velero credentials: useSecret: true secretContents: cloud: | [default] aws_access_key_id = minio aws_secret_access_key = minio123 bbtests: # TODO: Velero test is messy and times out running in BB CI # https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero/-/issues/9 enabled: false scripts: image: registry1.dso.mil/ironbank/opensource/velero/velero:v1.6.0 additionalVolumes: - name: transfer-kubectl emptyDir: {} - name: &yamlVolName yaml-configs configMap: name: "{{ .Chart.Name }}-backup-restore-files-config" additionalVolumeMounts: - name: transfer-kubectl mountPath: /usr/local/bin/kubectl subPath: kubectl - name: *yamlVolName mountPath: &yamlMountPath /yaml envs: MINIO_HOST: *minio-address TEST_YAML_DIR: *yamlMountPath MINIO_USER: minio MINIO_PASS: minio123 secretEnvs: - name: NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace keycloak: enabled: false ingress: gateway: "public" values: replicas: 1 resources: requests: cpu: 10m memory: 16Mi limits: {} bbtests: enabled: true cypress: artifacts: true envs: cypress_url: "https://keycloak.bigbang.dev" cypress_username: "admin" cypress_password: "password" # Custom dev secret configuration secrets: env: stringData: CUSTOM_REGISTRATION_CONFIG: /opt/jboss/keycloak/customreg.yaml KEYCLOAK_IMPORT: /opt/jboss/keycloak/realm.json X509_CA_BUNDLE: /etc/x509/https/cas.pem certauthority: stringData: cas.pem: '{{ .Files.Get "resources/dev/dod_cas.pem" }}' customreg: stringData: customreg.yaml: '{{ .Files.Get "resources/dev/baby-yoda.yaml" }}' realm: stringData: realm.json: '{{ .Files.Get "resources/dev/baby-yoda.json" }}' extraVolumes: |- - name: certauthority secret: secretName: {{ include "keycloak.fullname" . }}-certauthority - name: customreg secret: secretName: {{ include "keycloak.fullname" . }}-customreg - name: realm secret: secretName: {{ include "keycloak.fullname" . }}-realm extraVolumeMounts: |- - name: certauthority mountPath: /etc/x509/https/cas.pem subPath: cas.pem readOnly: true - name: customreg mountPath: /opt/jboss/keycloak/customreg.yaml subPath: customreg.yaml readOnly: true - name: realm mountPath: /opt/jboss/keycloak/realm.json subPath: realm.json readOnly: true extraVolumeMountsBigBang: - name: tlscert mountPath: /etc/x509/https/tls.crt subPath: tls.crt readOnly: true - name: tlskey mountPath: /etc/x509/https/tls.key subPath: tls.key readOnly: true + helm upgrade -i bigbang chart -n bigbang --create-namespace --set 'registryCredentials[0].username=robot$bb-dev-imagepullonly' --set 'registryCredentials[0].password=[MASKED]' --set 'registryCredentials[0].registry=registry1.dso.mil' --set 'registryCredentials[1].username=[MASKED]' --set 'registryCredentials[1].password=[MASKED]' --set 'registryCredentials[1].registry=docker.io' -f tests/ci/k3d/values.yaml Release "bigbang" does not exist. Installing it now. NAME: bigbang LAST DEPLOYED: Thu Oct 14 19:15:40 2021 NAMESPACE: bigbang STATUS: deployed REVISION: 1 TEST SUITE: None NOTES: Thank you for supporting PlatformOne! DEPRECATION NOTICE: The top level yaml key "hostname" has been deprecated and replaced with "domain". Please update your values override to use the "domain" key. ++ git branch --show-current + [[ master == \m\a\s\t\e\r ]] + echo 'Deploying secrets from the master branch' Deploying secrets from the master branch + kubectl apply -f tests/ci/shared-secrets.yaml secret/sops-gpg created gitrepository.source.toolkit.fluxcd.io/secrets created kustomization.kustomize.toolkit.fluxcd.io/secrets created [0Ksection_end:1634238940:01_deploy_bigbang.sh [0K [0Ksection_start:1634238940:02_wait_for_helmreleases.sh[collapsed=true] [0K[33;1m02_wait_for_helmreleases.sh[37m Found enabled helmreleases: gatekeeper istio-operator istio monitoring eck-operator ek fluent-bit twistlock cluster-auditor jaeger kiali Waiting on GitRepositories gitrepository.source.toolkit.fluxcd.io/fluentbit condition met gitrepository.source.toolkit.fluxcd.io/monitoring condition met gitrepository.source.toolkit.fluxcd.io/twistlock condition met gitrepository.source.toolkit.fluxcd.io/istio-operator condition met gitrepository.source.toolkit.fluxcd.io/elasticsearch-kibana condition met gitrepository.source.toolkit.fluxcd.io/eck-operator condition met gitrepository.source.toolkit.fluxcd.io/gatekeeper condition met gitrepository.source.toolkit.fluxcd.io/cluster-auditor condition met gitrepository.source.toolkit.fluxcd.io/istio-controlplane condition met gitrepository.source.toolkit.fluxcd.io/jaeger condition met gitrepository.source.toolkit.fluxcd.io/kiali condition met gitrepository.source.toolkit.fluxcd.io/secrets condition met Waiting for gatekeeper HR to exist Waiting for istio-operator HR to exist Waiting for istio HR to exist Waiting for monitoring HR to exist Waiting for eck-operator HR to exist Waiting for ek HR to exist Waiting for fluent-bit HR to exist Waiting for twistlock HR to exist Waiting for cluster-auditor HR to exist Waiting for jaeger HR to exist Waiting for kiali HR to exist Waiting on helm releases... All HR's deployed Waiting for custom resources... Checking for tests/wait.sh in istio:1.11.2-bb.0... found, running Checking for tests/wait.sh in istiooperator:1.11.2-bb.0... not found Checking for tests/wait.sh in jaeger:2.23.0-bb.3... found, running jaeger custom resource creation finished Checking for tests/wait.sh in kiali:1.39.0-bb.3... found, running kiali custom resource creation finished Checking for tests/wait.sh in clusterAuditor:0.3.0-bb.7... not found Checking for tests/wait.sh in gatekeeper:3.6.0-bb.2... not found Checking for tests/wait.sh in logging:0.1.21-bb.1... found, running Checking for tests/wait.sh in eckoperator:1.7.1-bb.0... not found Checking for tests/wait.sh in fluentbit:0.16.6-bb.0... not found Checking for tests/wait.sh in monitoring:14.0.0-bb.11... not found Checking for tests/wait.sh in twistlock:0.0.9-bb.0... not found NAMESPACE NAME READY STATUS AGE bigbang helmrelease.helm.toolkit.fluxcd.io/gatekeeper True Release reconciliation succeeded 7m37s bigbang helmrelease.helm.toolkit.fluxcd.io/istio-operator True Release reconciliation succeeded 7m37s bigbang helmrelease.helm.toolkit.fluxcd.io/istio True Release reconciliation succeeded 7m37s bigbang helmrelease.helm.toolkit.fluxcd.io/eck-operator True Release reconciliation succeeded 7m37s bigbang helmrelease.helm.toolkit.fluxcd.io/ek True Release reconciliation succeeded 7m37s bigbang helmrelease.helm.toolkit.fluxcd.io/monitoring True Release reconciliation succeeded 7m37s bigbang helmrelease.helm.toolkit.fluxcd.io/fluent-bit True Release reconciliation succeeded 7m37s bigbang helmrelease.helm.toolkit.fluxcd.io/twistlock True Release reconciliation succeeded 7m37s bigbang helmrelease.helm.toolkit.fluxcd.io/jaeger True Release reconciliation succeeded 7m37s bigbang helmrelease.helm.toolkit.fluxcd.io/cluster-auditor True Release reconciliation succeeded 7m37s bigbang helmrelease.helm.toolkit.fluxcd.io/kiali True Release reconciliation succeeded 7m37s NAMESPACE NAME READY STATUS AGE bigbang kustomization.kustomize.toolkit.fluxcd.io/secrets True Applied revision: master/307e012d37245c9f48486404db0fbb58a7870445 7m37s NAMESPACE NAME URL READY STATUS AGE bigbang gitrepository.source.toolkit.fluxcd.io/jaeger https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git True Fetched revision: 2.23.0-bb.3/ecb95c9b9b7476c4b2d4397786753b445bf553e6 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/kiali https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali.git True Fetched revision: 1.39.0-bb.3/b9ca008362097530b1ec4f552cb08ed429a093c5 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/fluentbit https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git True Fetched revision: 0.16.6-bb.0/1d7f518333097e87ad5e7a4886444b69c81609e0 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/monitoring https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git True Fetched revision: 14.0.0-bb.11/3065f8ea564858211d36132bec072c45e32a1aaa 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/twistlock https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git True Fetched revision: 0.0.9-bb.0/9af87c17b08f02e38c7bcaf605c8f4d594e07a7d 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/istio-operator https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git True Fetched revision: 1.11.2-bb.0/adda883edce2c789e8ea3e8c815760f2af49c241 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/elasticsearch-kibana https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git True Fetched revision: 0.1.21-bb.1/3479de4301ff3e49403347afcb6ea4ceffcc16e4 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/eck-operator https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git True Fetched revision: 1.7.1-bb.0/97c489b2b094e64c04f84712110b0d01484f7417 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/gatekeeper https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git True Fetched revision: 3.6.0-bb.2/2885f823302f49d5e7a193ab3cf4e0e3d7cfdc81 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/istio-controlplane https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git True Fetched revision: 1.11.2-bb.0/c3a2f56fc447c7e5818afe27fa13b3ccd0076338 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/cluster-auditor https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git True Fetched revision: 0.3.0-bb.7/2e4bb4379ea6beb937b521738044eae2cc83a9ba 7m37s bigbang gitrepository.source.toolkit.fluxcd.io/secrets https://repo1.dso.mil/platform-one/big-bang/bigbang.git True Fetched revision: master/307e012d37245c9f48486404db0fbb58a7870445 7m37s Waiting on Secrets Kustomization kustomization.kustomize.toolkit.fluxcd.io/secrets condition met Waiting on all jobs, deployments, statefulsets, and daemonsets [0Ksection_end:1634239400:02_wait_for_helmreleases.sh [0K [32;1m$ set -e # collapsed multi-line command[0;m [0Ksection_start:1634239400:01_virtualservices.sh[collapsed=true] [0K[33;1m01_virtualservices.sh[37m Executing ./tests/tests/01_virtualservices.sh... Checking **************************************** Begin curl prometheus.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to prometheus.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "prometheus.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x5573f58924a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: prometheus.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 302 < content-type: text/html; charset=utf-8 < location: /graph < date: Thu, 14 Oct 2021 19:23:20 GMT < content-length: 29 < { [29 bytes data] * Connection #0 to host prometheus.bigbang.dev left intact **************************************** End curl prometheus.bigbang.dev **************************************** **************************************** Begin curl grafana.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to grafana.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "grafana.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x559617cfe4a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: grafana.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 302 < cache-control: no-cache < content-type: text/html; charset=utf-8 < expires: -1 < location: /login < pragma: no-cache < set-cookie: redirect_to=%2F; Path=/; HttpOnly; SameSite=Lax < x-content-type-options: nosniff < x-frame-options: deny < x-xss-protection: 1; mode=block < date: Thu, 14 Oct 2021 19:23:20 GMT < content-length: 29 < { [29 bytes data] * Connection #0 to host grafana.bigbang.dev left intact **************************************** End curl grafana.bigbang.dev **************************************** **************************************** Begin curl alertmanager.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to alertmanager.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "alertmanager.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x563eb70474a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: alertmanager.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 200 < accept-ranges: bytes < cache-control: no-cache, no-store, must-revalidate < content-length: 1314 < content-type: text/html; charset=utf-8 < expires: 0 < last-modified: Thu, 01 Jan 1970 00:00:01 GMT < pragma: no-cache < date: Thu, 14 Oct 2021 19:23:20 GMT < { [1314 bytes data] * Connection #0 to host alertmanager.bigbang.dev left intact **************************************** End curl alertmanager.bigbang.dev **************************************** **************************************** Begin curl kibana.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to kibana.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "kibana.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x563d2ab304a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: kibana.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 302 < location: /login?next=%2F < kbn-name: logging-ek < kbn-license-sig: 70ea2cbe5d7f9ce088905eb894994f9f79d9bedb54f59dbd6243938876f72282 < cache-control: private, no-cache, no-store, must-revalidate < content-length: 0 < date: Thu, 14 Oct 2021 19:23:20 GMT < { [0 bytes data] * Connection #0 to host kibana.bigbang.dev left intact **************************************** End curl kibana.bigbang.dev **************************************** **************************************** Begin curl twistlock.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to twistlock.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "twistlock.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x5648d55644a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: twistlock.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 200 < accept-ranges: bytes < content-length: 5514 < content-type: text/html; charset=utf-8 < last-modified: Mon, 21 Jun 2021 09:26:21 GMT < strict-transport-security: max-age=31536000; includeSubDomains < x-frame-options: DENY < date: Thu, 14 Oct 2021 19:23:20 GMT < { [5514 bytes data] * Connection #0 to host twistlock.bigbang.dev left intact **************************************** End curl twistlock.bigbang.dev **************************************** **************************************** Begin curl kiali.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to kiali.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "kiali.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x564cadb2e4a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: kiali.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 503 < content-length: 19 < content-type: text/plain < date: Thu, 14 Oct 2021 19:23:20 GMT < { [19 bytes data] * Connection #0 to host kiali.bigbang.dev left intact **************************************** End curl kiali.bigbang.dev **************************************** **************************************** Begin curl tracing.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to tracing.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "tracing.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x5594558974a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: tracing.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 200 < content-type: text/html; charset=utf-8 < vary: Accept-Encoding < date: Thu, 14 Oct 2021 19:23:20 GMT < { [3276 bytes data] * Connection #0 to host tracing.bigbang.dev left intact **************************************** End curl tracing.bigbang.dev **************************************** [0Ksection_end:1634239400:01_virtualservices.sh [0K [0Ksection_start:1634239400:02_non_ironbank.sh[collapsed=true] [0K[33;1m02_non_ironbank.sh[37m Executing ./tests/tests/02_non_ironbank.sh... Showing images not from ironbank: None [0Ksection_end:1634239401:02_non_ironbank.sh [0K [0Ksection_start:1634239401:03_helm_tests.sh[collapsed=true] [0K[33;1m03_helm_tests.sh[37m Executing ./tests/tests/03_helm_tests.sh... Setting up CoreDNS for VS resolution... configmap/coredns patched deployment.apps/coredns restarted Waiting for deployment "coredns" rollout to finish: 0 of 1 updated replicas are available... deployment "coredns" successfully rolled out Running helm tests for eck-operator-eck-operator... 😞 No tests found for eck-operator-eck-operator Running helm tests for gatekeeper-system-gatekeeper... 😞 No tests found for gatekeeper-system-gatekeeper Running helm tests for istio-operator-istio-operator... 😞 No tests found for istio-operator-istio-operator Running helm tests for istio-system-istio... 😞 No tests found for istio-system-istio Running helm tests for jaeger-jaeger... ✅ All tests sucessful for jaeger-jaeger Running helm tests for kiali-kiali... ✅ All tests sucessful for kiali-kiali Running helm tests for logging-cluster-auditor... 😞 No tests found for logging-cluster-auditor Running helm tests for logging-ek... 😞 No tests found for logging-ek Running helm tests for logging-fluent-bit... 😞 No tests found for logging-fluent-bit Running helm tests for monitoring-monitoring... ✅ All tests sucessful for monitoring-monitoring Running helm tests for twistlock-twistlock... ✅ All tests sucessful for twistlock-twistlock Finished running all helm tests. ✅ All helm tests run successfully. [0Ksection_end:1634239578:03_helm_tests.sh [0K [32;1m$ echo "Upgrade Big Bang from ${CI_MERGE_REQUEST_SOURCE_BRANCH_NAME}"[0;m Upgrade Big Bang from kiali-update-1.40.1 [32;1m$ echo -e "\e[0Ksection_start:`date +%s`:git_upgrade[collapsed=true]\r\e[0K\e[33;1mGit Upgrade\e[37m"[0;m [0Ksection_start:1634239578:git_upgrade[collapsed=true] [0K[33;1mGit Upgrade[37m [32;1m$ git reset --hard && git clean -fd[0;m HEAD is now at 307e012d Merge branch 'jasonkrause-master-patch-92150' into 'master' Removing clusterAuditor.wait.sh Removing eckoperator.wait.sh Removing fluentbit.wait.sh Removing gatekeeper.wait.sh Removing istio.wait.sh Removing istiooperator.wait.sh Removing jaeger.wait.sh Removing kiali.wait.sh Removing logging.wait.sh Removing monitoring.wait.sh Removing newhosts Removing test-artifacts/ Removing twistlock.wait.sh [32;1m$ git checkout ${CI_MERGE_REQUEST_SOURCE_BRANCH_NAME}[0;m Switched to a new branch 'kiali-update-1.40.1' Branch 'kiali-update-1.40.1' set up to track remote branch 'kiali-update-1.40.1' from 'origin'. [32;1m$ echo -e "\e[0Ksection_end:`date +%s`:git_upgrade\r\e[0K"[0;m [0Ksection_end:1634239578:git_upgrade [0K [32;1m$ set -e # collapsed multi-line command[0;m [0Ksection_start:1634239578:00_deploy_flux.sh[collapsed=true] [0K[33;1m00_deploy_flux.sh[37m + trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR + ./scripts/install_flux.sh --registry-username 'robot$bb-dev-imagepullonly' --registry-password [MASKED] --registry-email bigbang@bigbang.dev REGISTRY_URL: registry1.dso.mil REGISTRY_USERNAME: robot$bb-dev-imagepullonly Error from server (AlreadyExists): namespaces "flux-system" already exists Creating secret private-registry in namespace flux-system secret/private-registry configured Installing flux from kustomization namespace/flux-system unchanged customresourcedefinition.apiextensions.k8s.io/alerts.notification.toolkit.fluxcd.io configured customresourcedefinition.apiextensions.k8s.io/buckets.source.toolkit.fluxcd.io configured customresourcedefinition.apiextensions.k8s.io/gitrepositories.source.toolkit.fluxcd.io configured customresourcedefinition.apiextensions.k8s.io/helmcharts.source.toolkit.fluxcd.io configured customresourcedefinition.apiextensions.k8s.io/helmreleases.helm.toolkit.fluxcd.io configured customresourcedefinition.apiextensions.k8s.io/helmrepositories.source.toolkit.fluxcd.io configured customresourcedefinition.apiextensions.k8s.io/kustomizations.kustomize.toolkit.fluxcd.io configured customresourcedefinition.apiextensions.k8s.io/providers.notification.toolkit.fluxcd.io configured customresourcedefinition.apiextensions.k8s.io/receivers.notification.toolkit.fluxcd.io configured serviceaccount/helm-controller unchanged serviceaccount/kustomize-controller unchanged serviceaccount/notification-controller unchanged serviceaccount/source-controller unchanged clusterrole.rbac.authorization.k8s.io/crd-controller-flux-system unchanged clusterrolebinding.rbac.authorization.k8s.io/cluster-reconciler-flux-system unchanged clusterrolebinding.rbac.authorization.k8s.io/crd-controller-flux-system unchanged service/notification-controller unchanged service/source-controller unchanged service/webhook-receiver unchanged deployment.apps/helm-controller unchanged deployment.apps/kustomize-controller unchanged deployment.apps/notification-controller unchanged deployment.apps/source-controller unchanged networkpolicy.networking.k8s.io/allow-egress unchanged networkpolicy.networking.k8s.io/allow-scraping unchanged networkpolicy.networking.k8s.io/allow-webhooks unchanged deployment.apps/helm-controller condition met deployment.apps/source-controller condition met deployment.apps/kustomize-controller condition met deployment.apps/notification-controller condition met [0Ksection_end:1634239580:00_deploy_flux.sh [0K [0Ksection_start:1634239580:01_deploy_bigbang.sh[collapsed=true] [0K[33;1m01_deploy_bigbang.sh[37m + trap 'echo exit at ${0}:${LINENO}, command was: ${BASH_COMMAND} 1>&2' ERR + [[ '' == \m\a\s\t\e\r ]] + [[ ! -z '' ]] + [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security =~ all-packages ]] + IFS=, + for package in $CI_MERGE_REQUEST_LABELS ++ yq e .addons.kiali.enabled tests/ci/k3d/values.yaml + '[' null == false ']' + for package in $CI_MERGE_REQUEST_LABELS ++ yq e '.addons.Package Sustainment.enabled' tests/ci/k3d/values.yaml + '[' '' == false ']' + for package in $CI_MERGE_REQUEST_LABELS ++ yq e .addons.priority::3.enabled tests/ci/k3d/values.yaml + '[' '- [{null: [[{null: 3}]]}]' == false ']' + for package in $CI_MERGE_REQUEST_LABELS ++ yq e .addons.status::doing.enabled tests/ci/k3d/values.yaml + '[' '' == false ']' + for package in $CI_MERGE_REQUEST_LABELS ++ yq e .addons.team::core/security.enabled tests/ci/k3d/values.yaml + '[' '' == false ']' ++ yq e .addons.keycloak.enabled tests/ci/k3d/values.yaml + '[' false == true ']' + [[ merge_request_event == \s\c\h\e\d\u\l\e ]] + [[ kiali,Package Sustainment,priority::3,status::doing,team::core/security = *\t\e\s\t\-\c\i\:\:\i\n\f\r\a* ]] + echo 'Installing BigBang with the following configurations:' Installing BigBang with the following configurations: + cat tests/ci/k3d/values.yaml hostname: bigbang.dev flux: interval: 1m rollback: cleanupOnFail: false networkPolicies: controlPlaneCidr: 172.16.0.0/12 logging: enabled: true values: elasticsearch: master: count: 1 persistence: size: 256Mi resources: requests: cpu: .5 limits: {} heap: min: 1g max: 1g data: count: 2 persistence: size: 256Mi resources: requests: cpu: .5 limits: {} heap: min: 1g max: 1g kibana: count: 1 bbtests: # TODO: Connection refused on the script test currently # https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana/-/issues/39 enabled: false cypress: artifacts: true envs: cypress_kibana_url: "https://kibana.bigbang.dev" secretEnvs: - name: cypress_elastic_password valueFrom: secretKeyRef: name: "logging-ek-es-elastic-user" key: elastic scripts: image: registry1.dso.mil/ironbank/stedolan/jq:1.6 envs: elasticsearch_host: "https://{{ .Release.Name }}-es-http.{{ .Release.Namespace }}.svc.cluster.local:9200" desired_version: "{{ .Values.elasticsearch.version }}" secretEnvs: - name: ELASTIC_PASSWORD valueFrom: secretKeyRef: name: "logging-ek-es-elastic-user" key: elastic fluentbit: values: securityContext: privileged: true bbtests: # TODO: Connection refused on the test currently # https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit/-/issues/18 scripts: # Image commented out to disable the test since the BB Test Lib version being used doesn't have the enabled flag # image: registry1.dso.mil/ironbank/stedolan/jq:1.6 envs: fluent_host: "http://{{ include \"fluent-bit.fullname\" . }}.{{ .Release.Namespace }}.svc.cluster.local:{{ .Values.service.port }}" desired_version: "{{ .Values.image.tag }}" istio: enabled: true values: kiali: dashboard: auth: strategy: "anonymous" jaeger: enabled: true values: bbtests: enabled: true cypress: artifacts: true envs: cypress_url: "https://tracing.bigbang.dev" kiali: enabled: true values: cr: spec: auth: strategy: "anonymous" bbtests: enabled: true cypress: artifacts: true envs: cypress_url: 'https://kiali.bigbang.dev' clusterAuditor: enabled: true values: resources: requests: cpu: 100m memory: .5Gi limits: {} monitoring: enabled: true values: prometheus: prometheusSpec: resources: requests: cpu: 100m memory: 200Mi limits: {} kube-state-metrics: resources: requests: cpu: 10m memory: 32Mi limits: {} prometheus-node-exporter: resources: requests: cpu: 100m memory: 30Mi limits: {} grafana: testFramework: enabled: false dashboards: default: k8s-deployment: gnetId: 741 revision: 1 datasource: Prometheus downloadDashboards: resources: limits: cpu: 20m memory: 20Mi requests: cpu: 20m memory: 20Mi dashboardProviders: dashboardproviders.yaml: apiVersion: 1 providers: - name: 'default' orgId: 1 folder: '' type: file disableDeletion: false editable: true options: path: /var/lib/grafana/dashboards bbtests: enabled: true cypress: artifacts: true envs: cypress_prometheus_url: 'https://prometheus.bigbang.dev' cypress_grafana_url: 'https://grafana.bigbang.dev' cypress_alertmanager_url: 'https://alertmanager.bigbang.dev' gatekeeper: enabled: true values: replicas: 1 resources: requests: cpu: 100m memory: 256Mi limits: {} violations: allowedCapabilities: parameters: excludedResources: # Allows k3d load balancer containers to not drop capabilities - istio-system/lb-port-.* allowedDockerRegistries: parameters: excludedResources: # Allows k3d load balancer containers to pull from public repos - istio-system/lb-port-.* allowedSecCompProfiles: parameters: excludedResources: # Allows k3d load balancer containers to have an undefined defined seccomp - istio-system/lb-port-.* allowedUsers: parameters: excludedResources: # Allows k3d load balancer containers to run as any user/group - istio-system/lb-port-.* containerRatio: parameters: excludedResources: # Allows k3d load balancer containers to have undefined limits/requests - istio-system/lb-port-.* hostNetworking: parameters: excludedResources: # Allows k3d load balancer containers to mount host ports - istio-system/lb-port-.* noBigContainers: parameters: excludedResources: # Allows k3d load balancer containers to have undefined limits/requests - istio-system/lb-port-.* noPrivilegedEscalation: parameters: excludedResources: # Allows k3d load balancer containers to have undefined security context - istio-system/lb-port-.* readOnlyRoot: parameters: excludedResources: # Allows k3d load balancer containers to mount filesystems read/write - istio-system/lb-port-.* requiredLabels: parameters: excludedResources: # Allows k3d load balancer pods to not have required labels - istio-system/svclb-.* requiredProbes: parameters: excludedResources: # Allows k3d load balancer containers to not have readiness/liveness probes - istio-system/lb-port-.* bbtests: # TODO: Test will need to be refactored at BB level to properly run since we can't turn everything to deny # https://repo1.dso.mil/platform-one/big-bang/apps/core/policy/-/issues/133 enabled: false scripts: image: registry1.dso.mil/ironbank/opensource/kubernetes-1.21/kubectl:v1.21.1 additionalVolumeMounts: - name: "{{ .Chart.Name }}-test-config" mountPath: /yaml - name: "{{ .Chart.Name }}-kube-cache" mountPath: /.kube/cache additionalVolumes: - name: "{{ .Chart.Name }}-test-config" configMap: name: "{{ .Chart.Name }}-test-config" - name: "{{ .Chart.Name }}-kube-cache" emptyDir: {} twistlock: enabled: true values: console: persistence: size: 256Mi bbtests: enabled: true cypress: artifacts: true envs: cypress_baseUrl: "https://twistlock.bigbang.dev" scripts: image: registry1.dso.mil/ironbank/stedolan/jq:1.6 envs: twistlock_host: "https://twistlock.bigbang.dev" desired_version: "{{ .Values.console.image.tag }}" # Addons are toggled based on labels in CI addons: argocd: enabled: false values: controller: resources: requests: cpu: 500m memory: 2Gi limits: {} dex: resources: requests: cpu: 10m memory: 128Mi limits: {} redis-bb: master: persistence: size: 256Mi replica: persistence: size: 256Mi redis: resources: requests: cpu: 50m memory: 64Mi limits: {} server: resources: requests: cpu: 20m memory: 128Mi limits: {} repoServer: resources: requests: cpu: 50m memory: 128Mi limits: {} configs: secret: argocdServerAdminPassword: '$2a$10$rUDZDckdDZ2TEwk9PDs3QuqjkL58qR1IHE1Kj4MwDx.7/m5dytZJm' bbtests: # TODO: Disabled pending resolution of some "timing?" issues # https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd/-/issues/17 enabled: false cypress: artifacts: true envs: cypress_url: "https://argocd.bigbang.dev" cypress_user: "admin" cypress_password: "Password123" authservice: enabled: false chains: minimal: callback_uri: "https://minimal.bigbang.dev" values: resources: requests: cpu: 100m memory: 100Mi limits: {} redis: master: persistence: size: 256Mi replica: persistence: size: 256Mi gitlab: enabled: false sso: enabled: false flux: timeout: 20m values: global: rails: bootstrap: enabled: false gitlab-runner: resources: requests: cpu: 10m limits: {} gitlab: webservice: minReplicas: 1 maxReplicas: 1 helmTests: enabled: false sidekiq: minReplicas: 1 maxReplicas: 1 gitlab-shell: minReplicas: 1 maxReplicas: 1 gitaly: persistence: size: 256Mi resources: requests: cpu: 50m limits: {} shared-secrets: resources: requests: cpu: 10m limits: {} migrations: resources: requests: cpu: 10m limits: {} task-runner: persistence: size: 256Mi resources: requests: cpu: 10m limits: {} registry: hpa: minReplicas: 1 maxReplicas: 1 postgresql: persistence: size: 256Mi metrics: resources: requests: cpu: 10m limits: {} minio: persistence: size: 256Mi resources: requests: cpu: 50m limits: {} redis: master: persistence: size: 256Mi slave: persistence: size: 256Mi bbtests: enabled: true cypress: artifacts: true envs: cypress_baseUrl: https://gitlab.bigbang.dev cypress_gitlab_first_name: "test" cypress_gitlab_last_name: "user" cypress_gitlab_username: "testuser" cypress_gitlab_password: "12345678" cypress_gitlab_email: "testuser@example.com" cypress_gitlab_project: "my-awesome-project" secretEnvs: - name: cypress_adminpassword valueFrom: secretKeyRef: name: gitlab-gitlab-initial-root-password key: password scripts: image: "registry.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab/bbtests:0.0.3" envs: GITLAB_USER: "testuser" GITLAB_PASS: "12345678" GITLAB_EMAIL: "testuser@example.com" GITLAB_PROJECT: "my-awesome-project" GITLAB_REPOSITORY: https://gitlab.bigbang.dev GITLAB_ORIGIN: https://testuser:12345678@gitlab.bigbang.dev GITLAB_REGISTRY: registry.bigbang.dev gitlabRunner: enabled: false values: resources: requests: memory: 64Mi cpu: 50m limits: {} runners: protected: false bbtests: # TODO: This test runs fine locally with the same values, but fails in CI enabled: false cypress: artifacts: true secretEnvs: - name: cypress_adminpassword valueFrom: secretKeyRef: name: gitlab-gitlab-initial-root-password key: password envs: cypress_baseUrl: "https://gitlab.bigbang.dev" cypress_gitlab_email: "gitlab@bigbang.dev" cypress_gitlab_user: "gitlab_user" cypress_gitlab_password: "gitlab_pass" cypress_gitlab_project: "hello-world" anchore: enabled: false values: ensureDbJobs: resources: requests: cpu: 100m memory: 200Mi limits: {} sso: resources: requests: cpu: 100m memory: 200Mi limits: {} postgresql: persistence: size: 256Mi resources: requests: cpu: 100m memory: 200Mi limits: {} metrics: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreAnalyzer: replicaCount: 1 resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreApi: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreCatalog: resources: requests: cpu: 100m memory: 200Mi limits: {} anchorePolicyEngine: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreSimpleQueue: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEngineUpgradeJob: resources: requests: cpu: 100m memory: 200Mi limits: {} anchore-feeds-db: resources: requests: cpu: 100m memory: 200Mi limits: {} metrics: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseFeeds: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseFeedsUpgradeJob: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseRbac: authResources: resources: requests: cpu: 100m memory: 200Mi limits: {} managerResources: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseReports: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseNotifications: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEntperpiseUi: resources: requests: cpu: 100m memory: 200Mi limits: {} anchoreEnterpriseEngineUpgradeJob: resources: requests: cpu: 100m memory: 200Mi limits: {} bbtests: enabled: true scripts: image: registry1.dso.mil/ironbank/anchore/cli/cli:0.9.1 envs: ANCHORE_CLI_URL: "https://anchore-api.bigbang.dev/v1" ANCHORE_CLI_USER: admin secretEnvs: - name: ANCHORE_CLI_PASS valueFrom: secretKeyRef: name: "{{ template \"anchore-engine.fullname\" . }}-admin-pass" key: ANCHORE_ADMIN_PASSWORD sonarqube: enabled: false values: plugins: install: [] resources: requests: cpu: 100m memory: 200Mi limits: {} persistence: enabled: false size: 5Gi postgresql: persistence: size: 256Mi resources: requests: cpu: 100m memory: 200Mi limits: {} tests: enabled: false bbtests: enabled: true cypress: artifacts: true envs: cypress_url: "https://sonarqube.bigbang.dev" cypress_url_setup: "https://sonarqube.bigbang.dev/setup" cypress_user: "admin" cypress_password: "new_admin_password" account: adminPassword: new_admin_password currentAdminPassword: admin curlContainerImage: registry1.dso.mil/ironbank/big-bang/base:8.4 minioOperator: enabled: false minio: enabled: false values: tenants: pools: - servers: 1 volumesPerServer: 4 size: 256Mi resources: requests: cpu: 250m memory: 2Gi limits: cpu: 250m memory: 2Gi securityContext: runAsUser: 1001 runAsGroup: 1001 fsGroup: 1001 bbtests: # There have been intermittent failures of the tests in the past. The issue is tracked in the below issue. # https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio/-/issues/7 # This issue can be reopened if problems reappear. enabled: true cypress: artifacts: true envs: cypress_url: 'http://minio.bigbang.dev/login' secretEnvs: - name: cypress_secretkey valueFrom: secretKeyRef: name: "{{ .Values.tenants.secrets.name }}" key: secretkey - name: cypress_accesskey valueFrom: secretKeyRef: name: "{{ .Values.tenants.secrets.name }}" key: accesskey scripts: image: registry1.dso.mil/ironbank/opensource/minio/mc:RELEASE.2021-09-02T09-21-27Z envs: MINIO_PORT: '80' MINIO_HOST: 'http://minio' secretEnvs: - name: SECRET_KEY valueFrom: secretKeyRef: name: "{{ .Values.tenants.secrets.name }}" key: secretkey - name: ACCESS_KEY valueFrom: secretKeyRef: name: "{{ .Values.tenants.secrets.name }}" key: accesskey mattermostoperator: enabled: false mattermost: enabled: false elasticsearch: enabled: true values: postgresql: persistence: size: 256Mi replicaCount: 1 resources: requests: cpu: 100m memory: 128Mi limits: {} minio: tenants: pools: - servers: 1 volumesPerServer: 4 size: 256Mi resources: requests: cpu: 250m memory: 2Gi limits: cpu: 250m memory: 2Gi securityContext: runAsUser: 1001 runAsGroup: 1001 fsGroup: 1001 bbtests: enabled: true cypress: artifacts: true envs: cypress_url: https://chat.bigbang.dev cypress_mm_email: "test@bigbang.dev" cypress_mm_user: "bigbang" cypress_mm_password: "Bigbang#123" nexus: enabled: false values: persistence: # Do NOT set this below 5Gi, nexus will fail to boot storageSize: 5Gi nexus: # https://help.sonatype.com/repomanager3/installation/system-requirements#SystemRequirements-JVMDirectMemory env: - name: install4jAddVmParams value: "-Xms500M -Xmx500M -XX:MaxDirectMemorySize=500M -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap" resources: requests: cpu: 100m memory: 1500Mi bbtests: # TODO: Disabled pending resolution of "timing?" issues # https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/nexus/-/issues/9 enabled: false cypress: artifacts: true envs: cypress_nexus_url: "https://nexus.bigbang.dev" cypress_nexus_user: "admin" cypress_nexus_pass_new: "new_admin_password" secretEnvs: - name: cypress_nexus_pass valueFrom: secretKeyRef: name: nexus-repository-manager-secret key: admin.password velero: enabled: false plugins: - aws values: serviceAccount: server: name: velero configuration: # minio uses s3 provider provider: aws backupStorageLocation: bucket: velero config: &minio-config region: velero insecureSkipTLSVerify: "true" s3ForcePathStyle: "true" s3Url: &minio-address https://minio.bigbang.dev volumeSnapshotLocation: provider: aws config: region: velero credentials: useSecret: true secretContents: cloud: | [default] aws_access_key_id = minio aws_secret_access_key = minio123 bbtests: # TODO: Velero test is messy and times out running in BB CI # https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero/-/issues/9 enabled: false scripts: image: registry1.dso.mil/ironbank/opensource/velero/velero:v1.6.0 additionalVolumes: - name: transfer-kubectl emptyDir: {} - name: &yamlVolName yaml-configs configMap: name: "{{ .Chart.Name }}-backup-restore-files-config" additionalVolumeMounts: - name: transfer-kubectl mountPath: /usr/local/bin/kubectl subPath: kubectl - name: *yamlVolName mountPath: &yamlMountPath /yaml envs: MINIO_HOST: *minio-address TEST_YAML_DIR: *yamlMountPath MINIO_USER: minio MINIO_PASS: minio123 secretEnvs: - name: NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace keycloak: enabled: false ingress: gateway: "public" values: replicas: 1 resources: requests: cpu: 10m memory: 16Mi limits: {} bbtests: enabled: true cypress: artifacts: true envs: cypress_url: "https://keycloak.bigbang.dev" cypress_username: "admin" cypress_password: "password" # Custom dev secret configuration secrets: env: stringData: CUSTOM_REGISTRATION_CONFIG: /opt/jboss/keycloak/customreg.yaml KEYCLOAK_IMPORT: /opt/jboss/keycloak/realm.json X509_CA_BUNDLE: /etc/x509/https/cas.pem certauthority: stringData: cas.pem: '{{ .Files.Get "resources/dev/dod_cas.pem" }}' customreg: stringData: customreg.yaml: '{{ .Files.Get "resources/dev/baby-yoda.yaml" }}' realm: stringData: realm.json: '{{ .Files.Get "resources/dev/baby-yoda.json" }}' extraVolumes: |- - name: certauthority secret: secretName: {{ include "keycloak.fullname" . }}-certauthority - name: customreg secret: secretName: {{ include "keycloak.fullname" . }}-customreg - name: realm secret: secretName: {{ include "keycloak.fullname" . }}-realm extraVolumeMounts: |- - name: certauthority mountPath: /etc/x509/https/cas.pem subPath: cas.pem readOnly: true - name: customreg mountPath: /opt/jboss/keycloak/customreg.yaml subPath: customreg.yaml readOnly: true - name: realm mountPath: /opt/jboss/keycloak/realm.json subPath: realm.json readOnly: true extraVolumeMountsBigBang: - name: tlscert mountPath: /etc/x509/https/tls.crt subPath: tls.crt readOnly: true - name: tlskey mountPath: /etc/x509/https/tls.key subPath: tls.key readOnly: true + helm upgrade -i bigbang chart -n bigbang --create-namespace --set 'registryCredentials[0].username=robot$bb-dev-imagepullonly' --set 'registryCredentials[0].password=[MASKED]' --set 'registryCredentials[0].registry=registry1.dso.mil' --set 'registryCredentials[1].username=[MASKED]' --set 'registryCredentials[1].password=[MASKED]' --set 'registryCredentials[1].registry=docker.io' -f tests/ci/k3d/values.yaml Release "bigbang" has been upgraded. Happy Helming! NAME: bigbang LAST DEPLOYED: Thu Oct 14 19:26:20 2021 NAMESPACE: bigbang STATUS: deployed REVISION: 2 TEST SUITE: None NOTES: Thank you for supporting PlatformOne! DEPRECATION NOTICE: The top level yaml key "hostname" has been deprecated and replaced with "domain". Please update your values override to use the "domain" key. ++ git branch --show-current + [[ kiali-update-1.40.1 == \m\a\s\t\e\r ]] ++ git branch --show-current + [[ kiali-update-1.40.1 == \m\a\s\t\e\r ]] + '[' -z '' ']' + echo 'Deploying secrets from the kiali-update-1.40.1 branch' Deploying secrets from the kiali-update-1.40.1 branch + cat tests/ci/shared-secrets.yaml + sed 's|master|kiali-update-1.40.1|g' + kubectl apply -f - secret/sops-gpg unchanged gitrepository.source.toolkit.fluxcd.io/secrets configured kustomization.kustomize.toolkit.fluxcd.io/secrets unchanged [0Ksection_end:1634239581:01_deploy_bigbang.sh [0K [0Ksection_start:1634239581:02_wait_for_helmreleases.sh[collapsed=true] [0K[33;1m02_wait_for_helmreleases.sh[37m Found enabled helmreleases: gatekeeper istio-operator istio monitoring eck-operator ek fluent-bit twistlock cluster-auditor jaeger kiali Waiting on GitRepositories gitrepository.source.toolkit.fluxcd.io/jaeger condition met gitrepository.source.toolkit.fluxcd.io/fluentbit condition met gitrepository.source.toolkit.fluxcd.io/monitoring condition met gitrepository.source.toolkit.fluxcd.io/twistlock condition met gitrepository.source.toolkit.fluxcd.io/istio-operator condition met gitrepository.source.toolkit.fluxcd.io/elasticsearch-kibana condition met gitrepository.source.toolkit.fluxcd.io/eck-operator condition met gitrepository.source.toolkit.fluxcd.io/gatekeeper condition met gitrepository.source.toolkit.fluxcd.io/istio-controlplane condition met gitrepository.source.toolkit.fluxcd.io/cluster-auditor condition met gitrepository.source.toolkit.fluxcd.io/kiali condition met gitrepository.source.toolkit.fluxcd.io/secrets condition met Waiting for gatekeeper HR to exist Waiting for istio-operator HR to exist Waiting for istio HR to exist Waiting for monitoring HR to exist Waiting for eck-operator HR to exist Waiting for ek HR to exist Waiting for fluent-bit HR to exist Waiting for twistlock HR to exist Waiting for cluster-auditor HR to exist Waiting for jaeger HR to exist Waiting for kiali HR to exist Waiting on helm releases... All HR's deployed Waiting for custom resources... Checking for tests/wait.sh in istio:1.11.2-bb.0... found, running Checking for tests/wait.sh in istiooperator:1.11.2-bb.0... not found Checking for tests/wait.sh in jaeger:2.23.0-bb.3... found, running jaeger custom resource creation finished Checking for tests/wait.sh in kiali:1.40.1-bb.0... found, running kiali custom resource creation finished Checking for tests/wait.sh in clusterAuditor:0.3.0-bb.7... not found Checking for tests/wait.sh in gatekeeper:3.6.0-bb.2... not found Checking for tests/wait.sh in logging:0.1.21-bb.1... found, running Checking for tests/wait.sh in eckoperator:1.7.1-bb.0... not found Checking for tests/wait.sh in fluentbit:0.16.6-bb.0... not found Checking for tests/wait.sh in monitoring:14.0.0-bb.11... not found Checking for tests/wait.sh in twistlock:0.0.9-bb.0... not found NAMESPACE NAME READY STATUS AGE bigbang helmrelease.helm.toolkit.fluxcd.io/gatekeeper True Release reconciliation succeeded 12m bigbang helmrelease.helm.toolkit.fluxcd.io/istio-operator True Release reconciliation succeeded 12m bigbang helmrelease.helm.toolkit.fluxcd.io/istio True Release reconciliation succeeded 12m bigbang helmrelease.helm.toolkit.fluxcd.io/eck-operator True Release reconciliation succeeded 12m bigbang helmrelease.helm.toolkit.fluxcd.io/ek True Release reconciliation succeeded 12m bigbang helmrelease.helm.toolkit.fluxcd.io/monitoring True Release reconciliation succeeded 12m bigbang helmrelease.helm.toolkit.fluxcd.io/fluent-bit True Release reconciliation succeeded 12m bigbang helmrelease.helm.toolkit.fluxcd.io/twistlock True Release reconciliation succeeded 12m bigbang helmrelease.helm.toolkit.fluxcd.io/jaeger True Release reconciliation succeeded 12m bigbang helmrelease.helm.toolkit.fluxcd.io/cluster-auditor True Release reconciliation succeeded 12m bigbang helmrelease.helm.toolkit.fluxcd.io/kiali True Release reconciliation succeeded 12m NAMESPACE NAME READY STATUS AGE bigbang kustomization.kustomize.toolkit.fluxcd.io/secrets True Applied revision: kiali-update-1.40.1/4f00a5a3ec83adc8080eee6ad9d911ef9708d6ff 12m NAMESPACE NAME URL READY STATUS AGE bigbang gitrepository.source.toolkit.fluxcd.io/jaeger https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git True Fetched revision: 2.23.0-bb.3/ecb95c9b9b7476c4b2d4397786753b445bf553e6 12m bigbang gitrepository.source.toolkit.fluxcd.io/fluentbit https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git True Fetched revision: 0.16.6-bb.0/1d7f518333097e87ad5e7a4886444b69c81609e0 12m bigbang gitrepository.source.toolkit.fluxcd.io/monitoring https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git True Fetched revision: 14.0.0-bb.11/3065f8ea564858211d36132bec072c45e32a1aaa 12m bigbang gitrepository.source.toolkit.fluxcd.io/twistlock https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git True Fetched revision: 0.0.9-bb.0/9af87c17b08f02e38c7bcaf605c8f4d594e07a7d 12m bigbang gitrepository.source.toolkit.fluxcd.io/istio-operator https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git True Fetched revision: 1.11.2-bb.0/adda883edce2c789e8ea3e8c815760f2af49c241 12m bigbang gitrepository.source.toolkit.fluxcd.io/elasticsearch-kibana https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git True Fetched revision: 0.1.21-bb.1/3479de4301ff3e49403347afcb6ea4ceffcc16e4 12m bigbang gitrepository.source.toolkit.fluxcd.io/eck-operator https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git True Fetched revision: 1.7.1-bb.0/97c489b2b094e64c04f84712110b0d01484f7417 12m bigbang gitrepository.source.toolkit.fluxcd.io/gatekeeper https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git True Fetched revision: 3.6.0-bb.2/2885f823302f49d5e7a193ab3cf4e0e3d7cfdc81 12m bigbang gitrepository.source.toolkit.fluxcd.io/istio-controlplane https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git True Fetched revision: 1.11.2-bb.0/c3a2f56fc447c7e5818afe27fa13b3ccd0076338 12m bigbang gitrepository.source.toolkit.fluxcd.io/cluster-auditor https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git True Fetched revision: 0.3.0-bb.7/2e4bb4379ea6beb937b521738044eae2cc83a9ba 12m bigbang gitrepository.source.toolkit.fluxcd.io/kiali https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali.git True Fetched revision: 1.40.1-bb.0/9d5e3fcbcef67213849fb3658266a92637413eda 12m bigbang gitrepository.source.toolkit.fluxcd.io/secrets https://repo1.dso.mil/platform-one/big-bang/bigbang.git True Fetched revision: kiali-update-1.40.1/4f00a5a3ec83adc8080eee6ad9d911ef9708d6ff 12m Waiting on Secrets Kustomization kustomization.kustomize.toolkit.fluxcd.io/secrets condition met Waiting on all jobs, deployments, statefulsets, and daemonsets [0Ksection_end:1634239666:02_wait_for_helmreleases.sh [0K [32;1m$ set -e # collapsed multi-line command[0;m [0Ksection_start:1634239666:01_virtualservices.sh[collapsed=true] [0K[33;1m01_virtualservices.sh[37m Executing ./tests/tests/01_virtualservices.sh... Checking **************************************** Begin curl prometheus.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to prometheus.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "prometheus.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x5611d6eea4a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: prometheus.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 302 < content-type: text/html; charset=utf-8 < location: /graph < date: Thu, 14 Oct 2021 19:27:46 GMT < content-length: 29 < { [29 bytes data] * Connection #0 to host prometheus.bigbang.dev left intact **************************************** End curl prometheus.bigbang.dev **************************************** **************************************** Begin curl grafana.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to grafana.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "grafana.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x5634cd2474a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: grafana.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 302 < cache-control: no-cache < content-type: text/html; charset=utf-8 < expires: -1 < location: /login < pragma: no-cache < set-cookie: redirect_to=%2F; Path=/; HttpOnly; SameSite=Lax < x-content-type-options: nosniff < x-frame-options: deny < x-xss-protection: 1; mode=block < date: Thu, 14 Oct 2021 19:27:46 GMT < content-length: 29 < { [29 bytes data] * Connection #0 to host grafana.bigbang.dev left intact **************************************** End curl grafana.bigbang.dev **************************************** **************************************** Begin curl alertmanager.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to alertmanager.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "alertmanager.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x5589c89e54a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: alertmanager.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 200 < accept-ranges: bytes < cache-control: no-cache, no-store, must-revalidate < content-length: 1314 < content-type: text/html; charset=utf-8 < expires: 0 < last-modified: Thu, 01 Jan 1970 00:00:01 GMT < pragma: no-cache < date: Thu, 14 Oct 2021 19:27:46 GMT < { [1314 bytes data] * Connection #0 to host alertmanager.bigbang.dev left intact **************************************** End curl alertmanager.bigbang.dev **************************************** **************************************** Begin curl kibana.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to kibana.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "kibana.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x5579120024a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: kibana.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 302 < location: /login?next=%2F < kbn-name: logging-ek < kbn-license-sig: 70ea2cbe5d7f9ce088905eb894994f9f79d9bedb54f59dbd6243938876f72282 < cache-control: private, no-cache, no-store, must-revalidate < content-length: 0 < date: Thu, 14 Oct 2021 19:27:46 GMT < { [0 bytes data] * Connection #0 to host kibana.bigbang.dev left intact **************************************** End curl kibana.bigbang.dev **************************************** **************************************** Begin curl twistlock.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to twistlock.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "twistlock.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x556e707a64a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: twistlock.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 200 < accept-ranges: bytes < content-length: 5514 < content-type: text/html; charset=utf-8 < last-modified: Mon, 21 Jun 2021 09:26:21 GMT < strict-transport-security: max-age=31536000; includeSubDomains < x-frame-options: DENY < date: Thu, 14 Oct 2021 19:27:46 GMT < { [5514 bytes data] * Connection #0 to host twistlock.bigbang.dev left intact **************************************** End curl twistlock.bigbang.dev **************************************** **************************************** Begin curl tracing.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to tracing.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "tracing.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x555b7e5a54a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: tracing.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 200 < content-type: text/html; charset=utf-8 < vary: Accept-Encoding < date: Thu, 14 Oct 2021 19:27:46 GMT < { [3276 bytes data] * Connection #0 to host tracing.bigbang.dev left intact **************************************** End curl tracing.bigbang.dev **************************************** **************************************** Begin curl kiali.bigbang.dev **************************************** * Trying 172.20.0.2... * TCP_NODELAY set * Connected to kiali.bigbang.dev (172.20.0.2) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4024 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=*.bigbang.dev * start date: Sep 27 14:55:07 2021 GMT * expire date: Dec 26 14:55:06 2021 GMT * subjectAltName: host "kiali.bigbang.dev" matched cert's "*.bigbang.dev" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * Using Stream ID: 1 (easy handle 0x55571a2a94a0) } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] > GET / HTTP/2 > Host: kiali.bigbang.dev > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] * TLSv1.3 (IN), TLS handshake, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [230 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)! } [5 bytes data] * TLSv1.3 (OUT), TLS app data, [no content] (0): } [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] * TLSv1.3 (IN), TLS app data, [no content] (0): { [1 bytes data] < HTTP/2 503 < content-length: 19 < content-type: text/plain < date: Thu, 14 Oct 2021 19:27:46 GMT < { [19 bytes data] * Connection #0 to host kiali.bigbang.dev left intact **************************************** End curl kiali.bigbang.dev **************************************** [0Ksection_end:1634239666:01_virtualservices.sh [0K [0Ksection_start:1634239666:02_non_ironbank.sh[collapsed=true] [0K[33;1m02_non_ironbank.sh[37m Executing ./tests/tests/02_non_ironbank.sh... Showing images not from ironbank: 8 registry.dso.mil/platform-one/big-bang/pipeline-templates/pipeline-templates/cypress/kubectl:5.0.0 [0Ksection_end:1634239666:02_non_ironbank.sh [0K [0Ksection_start:1634239666:03_helm_tests.sh[collapsed=true] [0K[33;1m03_helm_tests.sh[37m Executing ./tests/tests/03_helm_tests.sh... Setting up CoreDNS for VS resolution... configmap/coredns patched deployment.apps/coredns restarted Waiting for deployment "coredns" rollout to finish: 1 old replicas are pending termination... Waiting for deployment "coredns" rollout to finish: 0 of 1 updated replicas are available... deployment "coredns" successfully rolled out Running helm tests for eck-operator-eck-operator... 😞 No tests found for eck-operator-eck-operator Running helm tests for gatekeeper-system-gatekeeper... 😞 No tests found for gatekeeper-system-gatekeeper Running helm tests for istio-operator-istio-operator... 😞 No tests found for istio-operator-istio-operator Running helm tests for istio-system-istio... 😞 No tests found for istio-system-istio Running helm tests for jaeger-jaeger... ✅ All tests sucessful for jaeger-jaeger Running helm tests for kiali-kiali... Error: pod kiali-operator-cypress-test failed ❌ One or more tests failed for kiali-kiali --- Logs for kiali-operator-cypress-test: --- [90m====================================================================================================[39m [0m ([4m[1mRun Starting[22m[24m)[0m [90m ┌[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m┐[39m [90m │[39m [90mCypress:[39m 5.0.0 [90m│[39m [90m │[39m [90mBrowser:[39m Chrome 83 [90m(headless)[39m [90m│[39m [90m │[39m [90mSpecs:[39m [0m1 found (kiali-health.spec.js)[0m [90m│[39m [90m └[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m┘[39m [90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m Running: [90mkiali-health.spec.js[39m [90m(1 of 1)[39m Browserslist: caniuse-lite is outdated. Please run: npx browserslist@latest --update-db [0m[0m [0m Basic Kiali[0m [31m 1) Check Kiali UI is accessible[0m [92m [0m[32m 0 passing[0m[90m (220ms)[0m [31m 1 failing[0m [0m 1) Basic Kiali Check Kiali UI is accessible: [0m[31m CypressError: `cy.visit()` failed trying to load: https://kiali.bigbang.dev/ The response we received from your web server was: > 503: Service Unavailable This was considered a failure because the status code was not `2xx`. If you do not want status codes to cause failures pass the option: `failOnStatusCode: false`[0m[90m at http://localhost:45593/__cypress/runner/cypress_runner.js:157482:25 at visitFailedByErr (http://localhost:45593/__cypress/runner/cypress_runner.js:156857:12) at http://localhost:45593/__cypress/runner/cypress_runner.js:157462:13 at tryCatcher (http://localhost:45593/__cypress/runner/cypress_runner.js:9852:23) at Promise._settlePromiseFromHandler (http://localhost:45593/__cypress/runner/cypress_runner.js:7787:31) at Promise._settlePromise (http://localhost:45593/__cypress/runner/cypress_runner.js:7844:18) at Promise._settlePromise0 (http://localhost:45593/__cypress/runner/cypress_runner.js:7889:10) at Promise._settlePromises (http://localhost:45593/__cypress/runner/cypress_runner.js:7965:18) at _drainQueueStep (http://localhost:45593/__cypress/runner/cypress_runner.js:4559:12) at _drainQueue (http://localhost:45593/__cypress/runner/cypress_runner.js:4552:9) at Async.../../node_modules/bluebird/js/release/async.js.Async._drainQueues (http://localhost:45593/__cypress/runner/cypress_runner.js:4568:5) at Async.drainQueues (http://localhost:45593/__cypress/runner/cypress_runner.js:4438:14) From Your Spec Code: at Context.eval (http://localhost:45593/__cypress/tests?p=cypress/integration/kiali-health.spec.js:101:8) [0m [31m ([4m[1mResults[22m[24m)[39m [90m ┌[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m┐[39m [90m │[39m [90mTests:[39m [31m1[39m [90m│[39m [90m │[39m [90mPassing:[39m [31m0[39m [90m│[39m [90m │[39m [90mFailing:[39m [31m1[39m [90m│[39m [90m │[39m [90mPending:[39m [31m0[39m [90m│[39m [90m │[39m [90mSkipped:[39m [31m0[39m [90m│[39m [90m │[39m [90mScreenshots:[39m [31m1[39m [90m│[39m [90m │[39m [90mVideo:[39m [31mtrue[39m [90m│[39m [90m │[39m [90mDuration:[39m [31m0 seconds[39m [90m│[39m [90m │[39m [90mSpec Ran:[39m [31m[31mkiali-health.spec.js[31m[39m [90m│[39m [90m └[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m┘[39m [33m ([4m[1mScreenshots[22m[24m)[39m [90m [39m - [0m/test/cypress/screenshots/kiali-health.spec.js/Basic Kiali -- Check Kiali UI is [0m [90m[90m(1280x720)[90m[39m [90m [39m [0maccessible (failed).png[0m [36m ([4m[1mVideo[22m[24m)[39m [90m [39m [90m-[39m [90mStarted processing:[39m [36mCompressing to 32 CRF[39m [90m [39m [90m-[39m [90mFinished processing:[39m [36m/test/cypress/videos/kiali-health.spec.js.mp4[39m [90m(0 seconds)[39m [90m====================================================================================================[39m [0m ([4m[1mRun Finished[22m[24m)[0m [90m [39m [90mSpec[39m [90mTests[39m [90mPassing[39m [90mFailing[39m [90mPending[39m [90mSkipped[39m [90m [39m [90m ┌[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m┐[39m [90m │[39m [31m✖[39m [0mkiali-health.spec.js[0m [90m213ms[39m [0m1[0m [90m-[39m [31m1[39m [90m-[39m [90m-[39m [90m│[39m [90m └[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m─[39m[90m┘[39m [90m [39m [31m✖[39m [31m1 of 1 failed (100%)[39m [90m213ms[39m [0m1[0m [90m-[39m [31m1[39m [90m-[39m [90m-[39m [90m [39m tar: Removing leading `/' from member names configmap/cypress-screenshots created tar: Removing leading `/' from member names configmap/cypress-videos created --- Running helm tests for logging-cluster-auditor... 😞 No tests found for logging-cluster-auditor Running helm tests for logging-ek... 😞 No tests found for logging-ek Running helm tests for logging-fluent-bit... 😞 No tests found for logging-fluent-bit Running helm tests for monitoring-monitoring... ✅ All tests sucessful for monitoring-monitoring Running helm tests for twistlock-twistlock... ✅ All tests sucessful for twistlock-twistlock Finished running all helm tests. ❌ Encountered 1 package(s) with errors while running tests. See output logs for failed test(s) above and artifacts in the job. ./tests/tests/03_helm_tests.sh failed, see log output above and cluster debug. section_end:1634239812:step_script [0Ksection_start:1634239812:after_script [0K[0K[36;1mRunning after_script[0;m[0;m [32;1mRunning after script...[0;m [32;1m$ echo -e "\e[0Ksection_start:`date +%s`:k3d_down[collapsed=true]\r\e[0K\e[33;1mK3D Cluster Delete\e[37m"[0;m [0Ksection_start:1634239812:k3d_down[collapsed=true] [0K[33;1mK3D Cluster Delete[37m [32;1m$ kubectl get all -A[0;m NAMESPACE NAME READY STATUS RESTARTS AGE kube-system pod/metrics-server-86cbb8457f-tcd8k 1/1 Running 0 14m kube-system pod/local-path-provisioner-5ff76fc89d-nmsxp 1/1 Running 0 14m flux-system pod/notification-controller-585cd4cd84-fkwzv 1/1 Running 0 14m flux-system pod/kustomize-controller-68b899d765-psw57 1/1 Running 0 14m flux-system pod/source-controller-5995bc4d45-xql22 1/1 Running 0 14m flux-system pod/helm-controller-66cd66c8c5-c2qp7 1/1 Running 0 14m gatekeeper-system pod/gatekeeper-audit-846d6f8698-7lwzl 1/1 Running 0 14m gatekeeper-system pod/gatekeeper-controller-manager-699848fb65-68wwt 1/1 Running 0 14m istio-operator pod/istio-operator-8576cc9b76-rhs6z 1/1 Running 0 10m istio-system pod/istiod-5c877f8d5d-5wzm4 1/1 Running 0 10m istio-system pod/svclb-public-ingressgateway-28zsb 3/3 Running 0 10m istio-system pod/public-ingressgateway-6db79654bc-t28rt 1/1 Running 0 10m monitoring pod/monitoring-monitoring-kube-operator-5b95b955c4-q5fgs 1/1 Running 0 9m47s monitoring pod/monitoring-monitoring-prometheus-node-exporter-lzdlp 1/1 Running 0 9m47s monitoring pod/alertmanager-monitoring-monitoring-kube-alertmanager-0 2/2 Running 0 9m42s monitoring pod/prometheus-monitoring-monitoring-kube-prometheus-0 2/2 Running 1 9m42s monitoring pod/monitoring-monitoring-kube-state-metrics-66849b4bf6-j4lvb 1/1 Running 0 9m47s monitoring pod/monitoring-monitoring-grafana-7f757c7984-czjpl 2/2 Running 0 9m47s eck-operator pod/elastic-operator-0 2/2 Running 1 9m59s logging pod/logging-fluent-bit-bdm9p 2/2 Running 0 9m1s twistlock pod/twistlock-console-65c7694cb-nzs8n 2/2 Running 0 9m jaeger pod/jaeger-jaeger-jaeger-operator-76f99ff6f4-gzwzk 2/2 Running 0 8m57s logging pod/logging-ek-es-data-1 2/2 Running 0 9m6s logging pod/logging-ek-es-data-0 2/2 Running 0 9m6s logging pod/logging-ek-es-master-0 2/2 Running 0 9m6s logging pod/opa-collector-8645dc559f-hnbqp 2/2 Running 0 8m59s logging pod/logging-ek-kb-6cbdbb9b48-jrnbp 2/2 Running 0 9m5s jaeger pod/jaeger-bdc64f9b4-sx5d7 2/2 Running 2 8m7s kiali pod/kiali-kiali-kiali-operator-6b9c4b46f6-j7vvt 2/2 Running 2 3m50s kube-system pod/coredns-5f4c4c4747-q6rd8 1/1 Running 0 2m23s jaeger pod/jaeger-operator-cypress-test 0/1 Completed 0 2m19s kiali pod/kiali-operator-cypress-test 0/1 Error 0 109s monitoring pod/kube-prometheus-stack-cypress-test 0/1 Completed 0 97s twistlock pod/twistlock-cypress-test 0/1 Completed 0 71s kiali pod/kiali-7dc67dbdfb-xc9v7 2/2 Running 0 2m11s twistlock pod/twistlock-script-test 0/1 Completed 0 62s NAMESPACE NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE default service/kubernetes ClusterIP 10.43.0.1 <none> 443/TCP 15m kube-system service/kube-dns ClusterIP 10.43.0.10 <none> 53/UDP,53/TCP,9153/TCP 15m kube-system service/metrics-server ClusterIP 10.43.38.184 <none> 443/TCP 15m flux-system service/notification-controller ClusterIP 10.43.119.163 <none> 80/TCP 14m flux-system service/source-controller ClusterIP 10.43.234.132 <none> 80/TCP 14m flux-system service/webhook-receiver ClusterIP 10.43.118.80 <none> 80/TCP 14m gatekeeper-system service/gatekeeper-webhook-service ClusterIP 10.43.186.183 <none> 443/TCP 14m istio-operator service/istio-operator ClusterIP 10.43.77.141 <none> 8383/TCP 10m istio-system service/istiod ClusterIP 10.43.230.234 <none> 15010/TCP,15012/TCP,443/TCP,15014/TCP 10m istio-system service/public-ingressgateway LoadBalancer 10.43.72.170 172.20.0.2 15021:32008/TCP,80:31728/TCP,443:30595/TCP 10m eck-operator service/elastic-operator-webhook ClusterIP 10.43.250.199 <none> 443/TCP 9m59s kube-system service/monitoring-monitoring-kube-kube-etcd ClusterIP None <none> 2379/TCP 9m47s kube-system service/monitoring-monitoring-kube-kube-scheduler ClusterIP None <none> 10251/TCP 9m47s kube-system service/monitoring-monitoring-kube-kube-controller-manager ClusterIP None <none> 10252/TCP 9m47s kube-system service/monitoring-monitoring-kube-kube-proxy ClusterIP None <none> 10249/TCP 9m47s kube-system service/monitoring-monitoring-kube-coredns ClusterIP None <none> 9153/TCP 9m47s monitoring service/monitoring-monitoring-kube-prometheus ClusterIP 10.43.25.94 <none> 9090/TCP 9m47s monitoring service/monitoring-monitoring-kube-state-metrics ClusterIP 10.43.143.246 <none> 8080/TCP 9m47s monitoring service/monitoring-monitoring-prometheus-node-exporter ClusterIP 10.43.57.179 <none> 9100/TCP 9m47s monitoring service/monitoring-monitoring-grafana ClusterIP 10.43.101.196 <none> 80/TCP 9m47s monitoring service/monitoring-monitoring-kube-alertmanager ClusterIP 10.43.73.149 <none> 9093/TCP 9m47s monitoring service/monitoring-monitoring-kube-operator ClusterIP 10.43.42.120 <none> 443/TCP 9m47s kube-system service/monitoring-monitoring-kube-kubelet ClusterIP None <none> 10250/TCP,10255/TCP,4194/TCP 9m42s monitoring service/alertmanager-operated ClusterIP None <none> 9093/TCP,9094/TCP,9094/UDP 9m42s monitoring service/prometheus-operated ClusterIP None <none> 9090/TCP 9m42s logging service/logging-ek-es-transport ClusterIP None <none> 9300/TCP 9m8s logging service/logging-ek-es-http ClusterIP 10.43.60.98 <none> 9200/TCP 9m8s logging service/logging-ek-kb-http ClusterIP 10.43.90.92 <none> 5601/TCP 9m8s logging service/logging-ek-es-master ClusterIP None <none> 9200/TCP 9m7s logging service/logging-ek-es-data ClusterIP None <none> 9200/TCP 9m6s logging service/logging-fluent-bit ClusterIP 10.43.168.194 <none> 2020/TCP 9m1s twistlock service/twistlock-console ClusterIP 10.43.103.37 <none> 8084/TCP,8083/TCP,8081/TCP 9m jaeger service/jaeger-jaeger-jaeger-operator-metrics ClusterIP 10.43.141.162 <none> 8383/TCP,8686/TCP 8m57s jaeger service/jaeger-collector-headless ClusterIP None <none> 9411/TCP,14250/TCP,14267/TCP,14268/TCP 8m8s jaeger service/jaeger-collector ClusterIP 10.43.73.212 <none> 9411/TCP,14250/TCP,14267/TCP,14268/TCP 8m8s jaeger service/jaeger-query ClusterIP 10.43.11.44 <none> 16686/TCP 8m8s jaeger service/jaeger-agent ClusterIP None <none> 5775/UDP,5778/TCP,6831/UDP,6832/UDP 8m8s kiali service/kiali ClusterIP 10.43.186.99 <none> 20001/TCP,9090/TCP 7m40s NAMESPACE NAME DESIRED CURRENT READY UP-TO-DATE AVAILABLE NODE SELECTOR AGE istio-system daemonset.apps/svclb-public-ingressgateway 1 1 1 1 1 <none> 10m monitoring daemonset.apps/monitoring-monitoring-prometheus-node-exporter 1 1 1 1 1 <none> 9m47s logging daemonset.apps/logging-fluent-bit 1 1 1 1 1 <none> 9m1s NAMESPACE NAME READY UP-TO-DATE AVAILABLE AGE kube-system deployment.apps/metrics-server 1/1 1 1 15m kube-system deployment.apps/local-path-provisioner 1/1 1 1 15m flux-system deployment.apps/notification-controller 1/1 1 1 14m flux-system deployment.apps/kustomize-controller 1/1 1 1 14m flux-system deployment.apps/source-controller 1/1 1 1 14m flux-system deployment.apps/helm-controller 1/1 1 1 14m gatekeeper-system deployment.apps/gatekeeper-audit 1/1 1 1 14m gatekeeper-system deployment.apps/gatekeeper-controller-manager 1/1 1 1 14m istio-operator deployment.apps/istio-operator 1/1 1 1 10m istio-system deployment.apps/istiod 1/1 1 1 10m istio-system deployment.apps/public-ingressgateway 1/1 1 1 10m monitoring deployment.apps/monitoring-monitoring-kube-operator 1/1 1 1 9m47s monitoring deployment.apps/monitoring-monitoring-kube-state-metrics 1/1 1 1 9m47s monitoring deployment.apps/monitoring-monitoring-grafana 1/1 1 1 9m47s twistlock deployment.apps/twistlock-console 1/1 1 1 9m jaeger deployment.apps/jaeger-jaeger-jaeger-operator 1/1 1 1 8m57s logging deployment.apps/opa-collector 1/1 1 1 8m59s logging deployment.apps/logging-ek-kb 1/1 1 1 9m6s jaeger deployment.apps/jaeger 1/1 1 1 8m7s kiali deployment.apps/kiali-kiali-kiali-operator 1/1 1 1 8m58s kube-system deployment.apps/coredns 1/1 1 1 15m kiali deployment.apps/kiali 1/1 1 1 3m33s NAMESPACE NAME DESIRED CURRENT READY AGE kube-system replicaset.apps/metrics-server-86cbb8457f 1 1 1 14m kube-system replicaset.apps/local-path-provisioner-5ff76fc89d 1 1 1 14m flux-system replicaset.apps/notification-controller-585cd4cd84 1 1 1 14m flux-system replicaset.apps/kustomize-controller-68b899d765 1 1 1 14m flux-system replicaset.apps/source-controller-5995bc4d45 1 1 1 14m flux-system replicaset.apps/helm-controller-66cd66c8c5 1 1 1 14m gatekeeper-system replicaset.apps/gatekeeper-audit-846d6f8698 1 1 1 14m gatekeeper-system replicaset.apps/gatekeeper-controller-manager-699848fb65 1 1 1 14m istio-operator replicaset.apps/istio-operator-8576cc9b76 1 1 1 10m istio-system replicaset.apps/istiod-5c877f8d5d 1 1 1 10m istio-system replicaset.apps/public-ingressgateway-6db79654bc 1 1 1 10m monitoring replicaset.apps/monitoring-monitoring-kube-operator-5b95b955c4 1 1 1 9m47s monitoring replicaset.apps/monitoring-monitoring-kube-state-metrics-66849b4bf6 1 1 1 9m47s monitoring replicaset.apps/monitoring-monitoring-grafana-7f757c7984 1 1 1 9m47s twistlock replicaset.apps/twistlock-console-65c7694cb 1 1 1 9m jaeger replicaset.apps/jaeger-jaeger-jaeger-operator-76f99ff6f4 1 1 1 8m57s logging replicaset.apps/opa-collector-8645dc559f 1 1 1 8m59s logging replicaset.apps/logging-ek-kb-6cbdbb9b48 1 1 1 9m6s jaeger replicaset.apps/jaeger-bdc64f9b4 1 1 1 8m7s kube-system replicaset.apps/coredns-854c77959c 0 0 0 14m kiali replicaset.apps/kiali-kiali-kiali-operator-6b9c4b46f6 1 1 1 3m50s kiali replicaset.apps/kiali-kiali-kiali-operator-687d466cf7 0 0 0 8m58s kube-system replicaset.apps/coredns-6574758c95 0 0 0 6m49s kube-system replicaset.apps/coredns-5f4c4c4747 1 1 1 2m23s kiali replicaset.apps/kiali-574d484b54 0 0 0 3m33s kiali replicaset.apps/kiali-7dc67dbdfb 1 1 1 2m11s NAMESPACE NAME READY AGE monitoring statefulset.apps/alertmanager-monitoring-monitoring-kube-alertmanager 1/1 9m42s monitoring statefulset.apps/prometheus-monitoring-monitoring-kube-prometheus 1/1 9m42s eck-operator statefulset.apps/elastic-operator 1/1 9m59s logging statefulset.apps/logging-ek-es-data 2/2 9m6s logging statefulset.apps/logging-ek-es-master 1/1 9m6s NAMESPACE NAME REFERENCE TARGETS MINPODS MAXPODS REPLICAS AGE istio-system horizontalpodautoscaler.autoscaling/istiod Deployment/istiod 0%/60% 1 3 1 10m istio-system horizontalpodautoscaler.autoscaling/public-ingressgateway Deployment/public-ingressgateway 15%/80% 1 5 1 10m [32;1m$ kubectl get gitrepository,helmrelease,kustomizations -A[0;m NAMESPACE NAME URL READY STATUS AGE bigbang gitrepository.source.toolkit.fluxcd.io/jaeger https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git True Fetched revision: 2.23.0-bb.3/ecb95c9b9b7476c4b2d4397786753b445bf553e6 14m bigbang gitrepository.source.toolkit.fluxcd.io/fluentbit https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git True Fetched revision: 0.16.6-bb.0/1d7f518333097e87ad5e7a4886444b69c81609e0 14m bigbang gitrepository.source.toolkit.fluxcd.io/monitoring https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git True Fetched revision: 14.0.0-bb.11/3065f8ea564858211d36132bec072c45e32a1aaa 14m bigbang gitrepository.source.toolkit.fluxcd.io/twistlock https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git True Fetched revision: 0.0.9-bb.0/9af87c17b08f02e38c7bcaf605c8f4d594e07a7d 14m bigbang gitrepository.source.toolkit.fluxcd.io/istio-operator https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git True Fetched revision: 1.11.2-bb.0/adda883edce2c789e8ea3e8c815760f2af49c241 14m bigbang gitrepository.source.toolkit.fluxcd.io/elasticsearch-kibana https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git True Fetched revision: 0.1.21-bb.1/3479de4301ff3e49403347afcb6ea4ceffcc16e4 14m bigbang gitrepository.source.toolkit.fluxcd.io/eck-operator https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git True Fetched revision: 1.7.1-bb.0/97c489b2b094e64c04f84712110b0d01484f7417 14m bigbang gitrepository.source.toolkit.fluxcd.io/gatekeeper https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git True Fetched revision: 3.6.0-bb.2/2885f823302f49d5e7a193ab3cf4e0e3d7cfdc81 14m bigbang gitrepository.source.toolkit.fluxcd.io/istio-controlplane https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git True Fetched revision: 1.11.2-bb.0/c3a2f56fc447c7e5818afe27fa13b3ccd0076338 14m bigbang gitrepository.source.toolkit.fluxcd.io/cluster-auditor https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git True Fetched revision: 0.3.0-bb.7/2e4bb4379ea6beb937b521738044eae2cc83a9ba 14m bigbang gitrepository.source.toolkit.fluxcd.io/kiali https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali.git True Fetched revision: 1.40.1-bb.0/9d5e3fcbcef67213849fb3658266a92637413eda 14m bigbang gitrepository.source.toolkit.fluxcd.io/secrets https://repo1.dso.mil/platform-one/big-bang/bigbang.git True Fetched revision: kiali-update-1.40.1/4f00a5a3ec83adc8080eee6ad9d911ef9708d6ff 14m NAMESPACE NAME READY STATUS AGE bigbang helmrelease.helm.toolkit.fluxcd.io/gatekeeper True Release reconciliation succeeded 14m bigbang helmrelease.helm.toolkit.fluxcd.io/istio-operator True Release reconciliation succeeded 14m bigbang helmrelease.helm.toolkit.fluxcd.io/istio True Release reconciliation succeeded 14m bigbang helmrelease.helm.toolkit.fluxcd.io/eck-operator True Release reconciliation succeeded 14m bigbang helmrelease.helm.toolkit.fluxcd.io/ek True Release reconciliation succeeded 14m bigbang helmrelease.helm.toolkit.fluxcd.io/monitoring True Release reconciliation succeeded 14m bigbang helmrelease.helm.toolkit.fluxcd.io/fluent-bit True Release reconciliation succeeded 14m bigbang helmrelease.helm.toolkit.fluxcd.io/twistlock True Release reconciliation succeeded 14m bigbang helmrelease.helm.toolkit.fluxcd.io/jaeger True Release reconciliation succeeded 14m bigbang helmrelease.helm.toolkit.fluxcd.io/cluster-auditor True Release reconciliation succeeded 14m bigbang helmrelease.helm.toolkit.fluxcd.io/kiali True Release reconciliation succeeded 14m NAMESPACE NAME READY STATUS AGE bigbang kustomization.kustomize.toolkit.fluxcd.io/secrets True Applied revision: kiali-update-1.40.1/4f00a5a3ec83adc8080eee6ad9d911ef9708d6ff 14m [32;1m$ k3d cluster delete ${CI_JOB_ID}[0;m [36mINFO[0m[0000] Deleting cluster '7306903' [36mINFO[0m[0000] Deleted k3d-7306903-serverlb [36mINFO[0m[0012] Deleted k3d-7306903-server-0 [36mINFO[0m[0012] Deleting image volume 'k3d-7306903-images' [36mINFO[0m[0012] Removing cluster details from default kubeconfig... [36mINFO[0m[0012] Removing standalone kubeconfig file (if there is one)... [36mINFO[0m[0012] Successfully deleted cluster 7306903! [32;1m$ docker network rm ${CI_JOB_ID}[0;m 7306903 [32;1m$ echo -e "\e[0Ksection_end:`date +%s`:k3d_down\r\e[0K"[0;m [0Ksection_end:1634239825:k3d_down [0K section_end:1634239825:after_script [0Ksection_start:1634239825:upload_artifacts_on_failure [0K[0K[36;1mUploading artifacts for failed job[0;m[0;m [32;1mUploading artifacts...[0;m test-artifacts/: found 23 matching files and directories[0;m Uploading artifacts as "archive" to coordinator... ok[0;m id[0;m=7306903 responseStatus[0;m=201 Created token[0;m=xm5Ax-SY section_end:1634239827:upload_artifacts_on_failure [0Ksection_start:1634239827:cleanup_file_variables [0K[0K[36;1mCleaning up project directory and file based variables[0;m[0;m section_end:1634239827:cleanup_file_variables [0K[31;1mERROR: Job failed: command terminated with exit code 123 [0;m