CHAT_OUTPUT_BEGIN
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY12
STATUS=FAIL
RC=1
HOST=pve01
MODE=change
COMPONENT=newfi-staging-exact-gate-container-cert-route-dns
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=6545aae57e95240862e22f28e1e6836754039d779dbf9464bb98925890f75b0f
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=true
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=FAIL
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=1
CHANGES_MADE=true
ROLLBACK_STARTED=true
ROLLBACK_RESTORED=true
MUTATION_OUTCOME=ROLLED_BACK
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=0d1b05fda639598422d58a27c8b44a6dac62967a84aefee350a5439a61b0b28a
SANITIZED_OUTPUT_SHA256=fc78cb6c848af4a4a48a260fd3cddd611af9e0eb85b39b334355ecc8dcd52a3f
OUTPUT_BEGIN
APPLY12_BEGIN=true
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY12
COMPONENT=newfi-staging-exact-gate-container-cert-route-dns
MODE=change
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
REFERENCE_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
PRIOR_APPLY11_HISTORY_SHA256=6ca85bad856f1027bebc8b51f672862ae5efea522b1be882e9691f902b3e70af
APPLY10_SOURCE_HISTORY_SHA256=8af06844f666d8102ca45d689f72b1e2839c1939d144b523396d1dcf430034f0
PORTAL_PRODUCT_STATE_GATE=PASS
STAGING_PREFLIGHT={"backend_ip":"[PRIVATE_IP]","local_http":"503"}
EXISTING_CERT_GATE={"authenticator":"dns-cloudflare","cert":"/data/tls/certbot/live/newfi-staging-gram1-ru/fullchain.pem","cert_name":"newfi-staging-gram1-ru","key":"/data/tls/certbot/live/newfi-staging-gram1-ru/privkey.pem","metadata":"subject=CN=newfi-staging.gram1.ru\nissuer=C=US, O=Let's Encrypt, CN=YE2\nnotBefore=Sep  8 05:18:03 2026 GMT\nnotAfter=Dec  7 05:18:02 2026 GMT\nserial=06CD3AC17EB3DB6B6C24F569FDF654155013","renewal":"/data/tls/certbot/renewal/newfi-staging-gram1-ru.conf","renewal_credential_host":"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","renewal_credential_inside":"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","server":"https://acme-v02.api.letsencrypt.org/directory"}
CF_TOKEN_GATE={"source_path":"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before","valid_count":1,"zone_id_sha256":"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7"}
INGRESS_PREFLIGHT={"git_direct_https":"200","ip":"185.225.35.6"}
PREFLIGHT_COMPLETE_NO_MUTATION={"acme_txt_empty":true,"backend_http":"503","existing_cert_name":"newfi-staging-gram1-ru","existing_cert_valid":true,"ingress_ip":"185.225.35.6","renewal_authenticator":"dns-cloudflare","renewal_credential_inside":"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","renewal_server":"production_letsencrypt","route_absent":true,"strict_qga_timeout_zero":true,"target_dns_empty":true}
RENEWAL_CREDENTIAL_GATE={"created_now":true,"host_path":"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","inside_path":"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","mode":"0600","zone_access":"PASS"}
ROUTE_WRITTEN={"bytes":881,"path":"/opt/npmplus/nginx/proxy_host/newfi-staging-gram1-ru.manual.conf","proof_header":"NEWFI-260908-A-STAGINGEDGE-APPLY12","sha256":"60aa17db692f36eb45b1a2837ee5c1db78248fd69228370acfc5ceda2572811a"}
APPLY12_FAILURE=ChangeError:LOCAL_TLS_503_PROOF_FAIL:
ROLLBACK_ROUTE=PASS
ROLLBACK_CREATED_RENEWAL_CREDENTIAL=PASS
FINAL_DECISION=FAIL_NEWFI_STAGING_APPLY12_ROLLBACK_RESTORED
HOMELAB_RESULT_CONTRACT={"changes_made":true,"command_id":"NEWFI-260908-A-STAGINGEDGE-APPLY12","rollback_restored":true,"rollback_started":true,"status":"FAIL","version":1}

OUTPUT_END
CHAT_OUTPUT_END
