From 14d69865e4196bc06a9b4ae822bcd5325e8a6274 Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Tue, 8 Sep 2026 05:16:19 +0000 Subject: [PATCH] runtime: publish NEWFI-260908-A-STAGINGDNS-APPLY3 --- .../NEWFI-260908-A-STAGINGDNS-APPLY3.json | 38 ++++++++++++ .../NEWFI-260908-A-STAGINGDNS-APPLY3.txt | 58 +++++++++++++++++++ runtime/latest.json | 16 ++--- runtime/latest.txt | 34 +++++------ 4 files changed, 121 insertions(+), 25 deletions(-) create mode 100644 runtime/history/NEWFI-260908-A-STAGINGDNS-APPLY3.json create mode 100644 runtime/history/NEWFI-260908-A-STAGINGDNS-APPLY3.txt diff --git a/runtime/history/NEWFI-260908-A-STAGINGDNS-APPLY3.json b/runtime/history/NEWFI-260908-A-STAGINGDNS-APPLY3.json new file mode 100644 index 00000000..767b35fe --- /dev/null +++ b/runtime/history/NEWFI-260908-A-STAGINGDNS-APPLY3.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "NEWFI-260908-A-STAGINGDNS-APPLY3", + "status": "BLOCKED", + "rc": 2, + "host": "pve01", + "mode": "change", + "component": "newfi-staging-cloudflare-edge-egress-proof-dns-apply", + "started_at_utc": "2026-09-08T05:16:06Z", + "finished_at_utc": "2026-09-08T05:16:18Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "b53b2352a94b90ba36d5a7e1d3dc33c5905662d8c31bea08b63063178c9ec848", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": true, + "result_contract_valid": true, + "result_contract_status": "BLOCKED", + "result_contract_error": null, + "command_rc": 2, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "2be61b0a07113aa42dfc169cf66dccafd09b09f15e05f6cbdeee752eb207f629", + "sanitized_output_sha256": "2be61b0a07113aa42dfc169cf66dccafd09b09f15e05f6cbdeee752eb207f629", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "STAGINGDNS_APPLY3_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY3\nCOMPONENT=newfi-staging-cloudflare-edge-egress-proof-dns-apply\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nDISCOVERY1_HISTORY_SHA256=edf7a289f77b6580795698fdc7d82355903d24c8df42d76bf84ec8a36117b873\nPRIOR_DNS_APPLY2_HISTORY_SHA256=98919a95f99ad5459660a0c93f3c3d2c321025e9fb7c7c53ce4431dcd30e25a7\nPORTAL_PRODUCT_STATE_GATE=PASS\nPUBLIC_DNS_PRESTATE={\"1.1.1.1/A\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61462\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"1.1.1.1/AAAA\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51776\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t651\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"1.1.1.1/CNAME\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30755\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/A\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55448\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1391\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/AAAA\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3542\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1391\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/CNAME\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26353\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 512\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1392\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0}}\nCLOUDFLARE_TOKEN_DISCOVERY={\"candidate_count\":0,\"scanned_files\":1486}\nEDGE_VM_IDENTITY={\"name\":\"edge-vm\",\"node\":\"pve03\",\"vmid\":130}\nEDGE_CLOUDFLARE_TOKEN_SCAN={\"candidate_count\":3,\"rc\":0,\"source_paths\":[\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\",\"/opt/npmplus/secure/taftauto_cf_certbot.ini\",\"/opt/npmplus/secure/forum_cf_token.env\"]}\nEDGE_CLOUDFLARE_ZONE_ACCESS_VALID_COUNT=1\nCLOUDFLARE_TOKEN_SELECTED={\"source_paths\":[\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\"],\"valid_token_count\":1,\"zone_id_sha256\":\"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7\"}\nEDGE_VM_IDENTITY={\"name\":\"edge-vm\",\"node\":\"pve03\",\"vmid\":130}\nEDGE_EGRESS_PROBE={\"err\":\"\",\"ip\":\"85.121.4.192\",\"rc\":0}\nEDGE_EGRESS_PROBE={\"err\":\"\",\"ip\":\"85.121.4.192\",\"rc\":0}\nEDGE_PUBLIC_EGRESS_IP=85.121.4.192\nDNS_BLOCKED_REASON=EDGE_EGRESS_AND_GIT_A_MISMATCH:85.121.4.192!=185.225.35.6\nFINAL_DECISION=BLOCKED_NEWFI_STAGING_DNS_EDGE_EGRESS_AND_GIT_A_MISMATCH:85.121.4.192!=185.225.35.6\nHOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"NEWFI-260908-A-STAGINGDNS-APPLY3\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"BLOCKED\",\"version\":1}\n" +} diff --git a/runtime/history/NEWFI-260908-A-STAGINGDNS-APPLY3.txt b/runtime/history/NEWFI-260908-A-STAGINGDNS-APPLY3.txt new file mode 100644 index 00000000..79dcde9b --- /dev/null +++ b/runtime/history/NEWFI-260908-A-STAGINGDNS-APPLY3.txt @@ -0,0 +1,58 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY3 +STATUS=BLOCKED +RC=2 +HOST=pve01 +MODE=change +COMPONENT=newfi-staging-cloudflare-edge-egress-proof-dns-apply +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=b53b2352a94b90ba36d5a7e1d3dc33c5905662d8c31bea08b63063178c9ec848 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=true +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=BLOCKED +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=2 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=2be61b0a07113aa42dfc169cf66dccafd09b09f15e05f6cbdeee752eb207f629 +SANITIZED_OUTPUT_SHA256=2be61b0a07113aa42dfc169cf66dccafd09b09f15e05f6cbdeee752eb207f629 +OUTPUT_BEGIN +STAGINGDNS_APPLY3_BEGIN=true +COMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY3 +COMPONENT=newfi-staging-cloudflare-edge-egress-proof-dns-apply +MODE=change +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +REFERENCE_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED +RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +DISCOVERY1_HISTORY_SHA256=edf7a289f77b6580795698fdc7d82355903d24c8df42d76bf84ec8a36117b873 +PRIOR_DNS_APPLY2_HISTORY_SHA256=98919a95f99ad5459660a0c93f3c3d2c321025e9fb7c7c53ce4431dcd30e25a7 +PORTAL_PRODUCT_STATE_GATE=PASS +PUBLIC_DNS_PRESTATE={"1.1.1.1/A":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61462\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"1.1.1.1/AAAA":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51776\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t651\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"1.1.1.1/CNAME":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30755\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/A":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55448\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1391\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/AAAA":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3542\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1391\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/CNAME":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26353\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 512\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1392\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0}} +CLOUDFLARE_TOKEN_DISCOVERY={"candidate_count":0,"scanned_files":1486} +EDGE_VM_IDENTITY={"name":"edge-vm","node":"pve03","vmid":130} +EDGE_CLOUDFLARE_TOKEN_SCAN={"candidate_count":3,"rc":0,"source_paths":["/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before","/opt/npmplus/secure/taftauto_cf_certbot.ini","/opt/npmplus/secure/forum_cf_token.env"]} +EDGE_CLOUDFLARE_ZONE_ACCESS_VALID_COUNT=1 +CLOUDFLARE_TOKEN_SELECTED={"source_paths":["/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before"],"valid_token_count":1,"zone_id_sha256":"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7"} +EDGE_VM_IDENTITY={"name":"edge-vm","node":"pve03","vmid":130} +EDGE_EGRESS_PROBE={"err":"","ip":"85.121.4.192","rc":0} +EDGE_EGRESS_PROBE={"err":"","ip":"85.121.4.192","rc":0} +EDGE_PUBLIC_EGRESS_IP=85.121.4.192 +DNS_BLOCKED_REASON=EDGE_EGRESS_AND_GIT_A_MISMATCH:85.121.4.192!=185.225.35.6 +FINAL_DECISION=BLOCKED_NEWFI_STAGING_DNS_EDGE_EGRESS_AND_GIT_A_MISMATCH:85.121.4.192!=185.225.35.6 +HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"NEWFI-260908-A-STAGINGDNS-APPLY3","rollback_restored":null,"rollback_started":false,"status":"BLOCKED","version":1} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index b93e1225..767b35fe 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "NEWFI-260908-A-STAGINGDNS-APPLY2", + "command_id": "NEWFI-260908-A-STAGINGDNS-APPLY3", "status": "BLOCKED", "rc": 2, "host": "pve01", "mode": "change", - "component": "newfi-staging-cloudflare-edge-credential-dns-apply", - "started_at_utc": "2026-09-08T05:12:38Z", - "finished_at_utc": "2026-09-08T05:12:46Z", + "component": "newfi-staging-cloudflare-edge-egress-proof-dns-apply", + "started_at_utc": "2026-09-08T05:16:06Z", + "finished_at_utc": "2026-09-08T05:16:18Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "bf03fcfd32ee6364f10812970dea507df2d9304bf75627a198781d726bcc5f55", + "command_sha256": "b53b2352a94b90ba36d5a7e1d3dc33c5905662d8c31bea08b63063178c9ec848", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "bce41f2b0e086861c7528ac944e63d5f105cc1be50dabec87955e7bfa43aa39c", - "sanitized_output_sha256": "bce41f2b0e086861c7528ac944e63d5f105cc1be50dabec87955e7bfa43aa39c", + "raw_evidence_sha256": "2be61b0a07113aa42dfc169cf66dccafd09b09f15e05f6cbdeee752eb207f629", + "sanitized_output_sha256": "2be61b0a07113aa42dfc169cf66dccafd09b09f15e05f6cbdeee752eb207f629", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "STAGINGDNS_APPLY2_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY2\nCOMPONENT=newfi-staging-cloudflare-edge-credential-dns-apply\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nDISCOVERY1_HISTORY_SHA256=edf7a289f77b6580795698fdc7d82355903d24c8df42d76bf84ec8a36117b873\nPRIOR_DNS_APPLY1_HISTORY_SHA256=6ad59df4172788261d87a978a610e4b290ea86ba802cb7ebf4030100730aa633\nPORTAL_PRODUCT_STATE_GATE=PASS\nPUBLIC_DNS_PRESTATE={\"1.1.1.1/A\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63750\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t862\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"1.1.1.1/AAAA\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3743\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"1.1.1.1/CNAME\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33703\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/A\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22886\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1600\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/AAAA\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32030\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/CNAME\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6932\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 512\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0}}\nCLOUDFLARE_TOKEN_DISCOVERY={\"candidate_count\":0,\"scanned_files\":1486}\nEDGE_VM_IDENTITY={\"name\":\"edge-vm\",\"node\":\"pve03\",\"vmid\":130}\nEDGE_CLOUDFLARE_TOKEN_SCAN={\"candidate_count\":3,\"rc\":0,\"source_paths\":[\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\",\"/opt/npmplus/secure/taftauto_cf_certbot.ini\",\"/opt/npmplus/secure/forum_cf_token.env\"]}\nEDGE_CLOUDFLARE_ZONE_ACCESS_VALID_COUNT=1\nCLOUDFLARE_TOKEN_SELECTED={\"source_paths\":[\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\"],\"valid_token_count\":1,\"zone_id_sha256\":\"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7\"}\nREFERENCE_DNS_RECORD={\"content\":\"185.225.35.6\",\"name\":\"git.gram1.ru\",\"proxied\":false,\"ttl\":1}\nREFERENCE_DNS_RECORD={\"count\":0,\"name\":\"uptime.gram1.ru\",\"state\":\"SKIP\"}\nREFERENCE_DNS_RECORD={\"count\":0,\"name\":\"gotify.gram1.ru\",\"state\":\"SKIP\"}\nREFERENCE_DNS_RECORD={\"count\":0,\"name\":\"home.gram1.ru\",\"state\":\"SKIP\"}\nDNS_BLOCKED_REASON=INSUFFICIENT_EDGE_DNS_REFERENCES\nFINAL_DECISION=BLOCKED_NEWFI_STAGING_DNS_INSUFFICIENT_EDGE_DNS_REFERENCES\nHOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"NEWFI-260908-A-STAGINGDNS-APPLY2\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"BLOCKED\",\"version\":1}\n" + "output": "STAGINGDNS_APPLY3_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY3\nCOMPONENT=newfi-staging-cloudflare-edge-egress-proof-dns-apply\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nDISCOVERY1_HISTORY_SHA256=edf7a289f77b6580795698fdc7d82355903d24c8df42d76bf84ec8a36117b873\nPRIOR_DNS_APPLY2_HISTORY_SHA256=98919a95f99ad5459660a0c93f3c3d2c321025e9fb7c7c53ce4431dcd30e25a7\nPORTAL_PRODUCT_STATE_GATE=PASS\nPUBLIC_DNS_PRESTATE={\"1.1.1.1/A\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61462\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"1.1.1.1/AAAA\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51776\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t651\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"1.1.1.1/CNAME\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30755\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/A\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55448\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1391\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/AAAA\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3542\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1391\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/CNAME\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26353\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 512\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1392\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0}}\nCLOUDFLARE_TOKEN_DISCOVERY={\"candidate_count\":0,\"scanned_files\":1486}\nEDGE_VM_IDENTITY={\"name\":\"edge-vm\",\"node\":\"pve03\",\"vmid\":130}\nEDGE_CLOUDFLARE_TOKEN_SCAN={\"candidate_count\":3,\"rc\":0,\"source_paths\":[\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\",\"/opt/npmplus/secure/taftauto_cf_certbot.ini\",\"/opt/npmplus/secure/forum_cf_token.env\"]}\nEDGE_CLOUDFLARE_ZONE_ACCESS_VALID_COUNT=1\nCLOUDFLARE_TOKEN_SELECTED={\"source_paths\":[\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\"],\"valid_token_count\":1,\"zone_id_sha256\":\"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7\"}\nEDGE_VM_IDENTITY={\"name\":\"edge-vm\",\"node\":\"pve03\",\"vmid\":130}\nEDGE_EGRESS_PROBE={\"err\":\"\",\"ip\":\"85.121.4.192\",\"rc\":0}\nEDGE_EGRESS_PROBE={\"err\":\"\",\"ip\":\"85.121.4.192\",\"rc\":0}\nEDGE_PUBLIC_EGRESS_IP=85.121.4.192\nDNS_BLOCKED_REASON=EDGE_EGRESS_AND_GIT_A_MISMATCH:85.121.4.192!=185.225.35.6\nFINAL_DECISION=BLOCKED_NEWFI_STAGING_DNS_EDGE_EGRESS_AND_GIT_A_MISMATCH:85.121.4.192!=185.225.35.6\nHOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"NEWFI-260908-A-STAGINGDNS-APPLY3\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"BLOCKED\",\"version\":1}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index cf90298e..79dcde9b 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,15 +1,15 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY2 +COMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY3 STATUS=BLOCKED RC=2 HOST=pve01 MODE=change -COMPONENT=newfi-staging-cloudflare-edge-credential-dns-apply +COMPONENT=newfi-staging-cloudflare-edge-egress-proof-dns-apply REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=bf03fcfd32ee6364f10812970dea507df2d9304bf75627a198781d726bcc5f55 +COMMAND_SHA256=b53b2352a94b90ba36d5a7e1d3dc33c5905662d8c31bea08b63063178c9ec848 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=true @@ -24,12 +24,12 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=bce41f2b0e086861c7528ac944e63d5f105cc1be50dabec87955e7bfa43aa39c -SANITIZED_OUTPUT_SHA256=bce41f2b0e086861c7528ac944e63d5f105cc1be50dabec87955e7bfa43aa39c +RAW_EVIDENCE_SHA256=2be61b0a07113aa42dfc169cf66dccafd09b09f15e05f6cbdeee752eb207f629 +SANITIZED_OUTPUT_SHA256=2be61b0a07113aa42dfc169cf66dccafd09b09f15e05f6cbdeee752eb207f629 OUTPUT_BEGIN -STAGINGDNS_APPLY2_BEGIN=true -COMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY2 -COMPONENT=newfi-staging-cloudflare-edge-credential-dns-apply +STAGINGDNS_APPLY3_BEGIN=true +COMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY3 +COMPONENT=newfi-staging-cloudflare-edge-egress-proof-dns-apply MODE=change ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 @@ -38,21 +38,21 @@ REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d6 AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d DISCOVERY1_HISTORY_SHA256=edf7a289f77b6580795698fdc7d82355903d24c8df42d76bf84ec8a36117b873 -PRIOR_DNS_APPLY1_HISTORY_SHA256=6ad59df4172788261d87a978a610e4b290ea86ba802cb7ebf4030100730aa633 +PRIOR_DNS_APPLY2_HISTORY_SHA256=98919a95f99ad5459660a0c93f3c3d2c321025e9fb7c7c53ce4431dcd30e25a7 PORTAL_PRODUCT_STATE_GATE=PASS -PUBLIC_DNS_PRESTATE={"1.1.1.1/A":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63750\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t862\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"1.1.1.1/AAAA":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3743\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"1.1.1.1/CNAME":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33703\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/A":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22886\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1600\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/AAAA":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32030\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/CNAME":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6932\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 512\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0}} +PUBLIC_DNS_PRESTATE={"1.1.1.1/A":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61462\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"1.1.1.1/AAAA":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51776\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t651\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"1.1.1.1/CNAME":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30755\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/A":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55448\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1391\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/AAAA":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3542\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1391\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/CNAME":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26353\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 512\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1392\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0}} CLOUDFLARE_TOKEN_DISCOVERY={"candidate_count":0,"scanned_files":1486} EDGE_VM_IDENTITY={"name":"edge-vm","node":"pve03","vmid":130} EDGE_CLOUDFLARE_TOKEN_SCAN={"candidate_count":3,"rc":0,"source_paths":["/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before","/opt/npmplus/secure/taftauto_cf_certbot.ini","/opt/npmplus/secure/forum_cf_token.env"]} EDGE_CLOUDFLARE_ZONE_ACCESS_VALID_COUNT=1 CLOUDFLARE_TOKEN_SELECTED={"source_paths":["/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before"],"valid_token_count":1,"zone_id_sha256":"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7"} -REFERENCE_DNS_RECORD={"content":"185.225.35.6","name":"git.gram1.ru","proxied":false,"ttl":1} -REFERENCE_DNS_RECORD={"count":0,"name":"uptime.gram1.ru","state":"SKIP"} -REFERENCE_DNS_RECORD={"count":0,"name":"gotify.gram1.ru","state":"SKIP"} -REFERENCE_DNS_RECORD={"count":0,"name":"home.gram1.ru","state":"SKIP"} -DNS_BLOCKED_REASON=INSUFFICIENT_EDGE_DNS_REFERENCES -FINAL_DECISION=BLOCKED_NEWFI_STAGING_DNS_INSUFFICIENT_EDGE_DNS_REFERENCES -HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"NEWFI-260908-A-STAGINGDNS-APPLY2","rollback_restored":null,"rollback_started":false,"status":"BLOCKED","version":1} +EDGE_VM_IDENTITY={"name":"edge-vm","node":"pve03","vmid":130} +EDGE_EGRESS_PROBE={"err":"","ip":"85.121.4.192","rc":0} +EDGE_EGRESS_PROBE={"err":"","ip":"85.121.4.192","rc":0} +EDGE_PUBLIC_EGRESS_IP=85.121.4.192 +DNS_BLOCKED_REASON=EDGE_EGRESS_AND_GIT_A_MISMATCH:85.121.4.192!=185.225.35.6 +FINAL_DECISION=BLOCKED_NEWFI_STAGING_DNS_EDGE_EGRESS_AND_GIT_A_MISMATCH:85.121.4.192!=185.225.35.6 +HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"NEWFI-260908-A-STAGINGDNS-APPLY3","rollback_restored":null,"rollback_started":false,"status":"BLOCKED","version":1} OUTPUT_END CHAT_OUTPUT_END