From 5fc48bd6d45caca1d0af21060598d5c43536c355 Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Tue, 8 Sep 2026 07:09:46 +0000 Subject: [PATCH] runtime: publish NEWFI-260908-A-STAGINGEDGE-APPLY12 --- .../NEWFI-260908-A-STAGINGEDGE-APPLY12.json | 38 +++++++++++++ .../NEWFI-260908-A-STAGINGEDGE-APPLY12.txt | 57 +++++++++++++++++++ runtime/latest.json | 32 +++++------ runtime/latest.txt | 50 +++++++++------- 4 files changed, 142 insertions(+), 35 deletions(-) create mode 100644 runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY12.json create mode 100644 runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY12.txt diff --git a/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY12.json b/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY12.json new file mode 100644 index 00000000..18bf2480 --- /dev/null +++ b/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY12.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "NEWFI-260908-A-STAGINGEDGE-APPLY12", + "status": "FAIL", + "rc": 1, + "host": "pve01", + "mode": "change", + "component": "newfi-staging-exact-gate-container-cert-route-dns", + "started_at_utc": "2026-09-08T07:09:00Z", + "finished_at_utc": "2026-09-08T07:09:46Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "6545aae57e95240862e22f28e1e6836754039d779dbf9464bb98925890f75b0f", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": true, + "result_contract_valid": true, + "result_contract_status": "FAIL", + "result_contract_error": null, + "command_rc": 1, + "changes_made": true, + "rollback_started": true, + "rollback_restored": true, + "mutation_outcome": "ROLLED_BACK", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "0d1b05fda639598422d58a27c8b44a6dac62967a84aefee350a5439a61b0b28a", + "sanitized_output_sha256": "fc78cb6c848af4a4a48a260fd3cddd611af9e0eb85b39b334355ecc8dcd52a3f", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "APPLY12_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY12\nCOMPONENT=newfi-staging-exact-gate-container-cert-route-dns\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nPRIOR_APPLY11_HISTORY_SHA256=6ca85bad856f1027bebc8b51f672862ae5efea522b1be882e9691f902b3e70af\nAPPLY10_SOURCE_HISTORY_SHA256=8af06844f666d8102ca45d689f72b1e2839c1939d144b523396d1dcf430034f0\nPORTAL_PRODUCT_STATE_GATE=PASS\nSTAGING_PREFLIGHT={\"backend_ip\":\"[PRIVATE_IP]\",\"local_http\":\"503\"}\nEXISTING_CERT_GATE={\"authenticator\":\"dns-cloudflare\",\"cert\":\"/data/tls/certbot/live/newfi-staging-gram1-ru/fullchain.pem\",\"cert_name\":\"newfi-staging-gram1-ru\",\"key\":\"/data/tls/certbot/live/newfi-staging-gram1-ru/privkey.pem\",\"metadata\":\"subject=CN=newfi-staging.gram1.ru\\nissuer=C=US, O=Let's Encrypt, CN=YE2\\nnotBefore=Sep 8 05:18:03 2026 GMT\\nnotAfter=Dec 7 05:18:02 2026 GMT\\nserial=06CD3AC17EB3DB6B6C24F569FDF654155013\",\"renewal\":\"/data/tls/certbot/renewal/newfi-staging-gram1-ru.conf\",\"renewal_credential_host\":\"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"renewal_credential_inside\":\"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"server\":\"https://acme-v02.api.letsencrypt.org/directory\"}\nCF_TOKEN_GATE={\"source_path\":\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\",\"valid_count\":1,\"zone_id_sha256\":\"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7\"}\nINGRESS_PREFLIGHT={\"git_direct_https\":\"200\",\"ip\":\"185.225.35.6\"}\nPREFLIGHT_COMPLETE_NO_MUTATION={\"acme_txt_empty\":true,\"backend_http\":\"503\",\"existing_cert_name\":\"newfi-staging-gram1-ru\",\"existing_cert_valid\":true,\"ingress_ip\":\"185.225.35.6\",\"renewal_authenticator\":\"dns-cloudflare\",\"renewal_credential_inside\":\"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"renewal_server\":\"production_letsencrypt\",\"route_absent\":true,\"strict_qga_timeout_zero\":true,\"target_dns_empty\":true}\nRENEWAL_CREDENTIAL_GATE={\"created_now\":true,\"host_path\":\"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"inside_path\":\"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"mode\":\"0600\",\"zone_access\":\"PASS\"}\nROUTE_WRITTEN={\"bytes\":881,\"path\":\"/opt/npmplus/nginx/proxy_host/newfi-staging-gram1-ru.manual.conf\",\"proof_header\":\"NEWFI-260908-A-STAGINGEDGE-APPLY12\",\"sha256\":\"60aa17db692f36eb45b1a2837ee5c1db78248fd69228370acfc5ceda2572811a\"}\nAPPLY12_FAILURE=ChangeError:LOCAL_TLS_503_PROOF_FAIL:\nROLLBACK_ROUTE=PASS\nROLLBACK_CREATED_RENEWAL_CREDENTIAL=PASS\nFINAL_DECISION=FAIL_NEWFI_STAGING_APPLY12_ROLLBACK_RESTORED\nHOMELAB_RESULT_CONTRACT={\"changes_made\":true,\"command_id\":\"NEWFI-260908-A-STAGINGEDGE-APPLY12\",\"rollback_restored\":true,\"rollback_started\":true,\"status\":\"FAIL\",\"version\":1}\n" +} diff --git a/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY12.txt b/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY12.txt new file mode 100644 index 00000000..015d3140 --- /dev/null +++ b/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY12.txt @@ -0,0 +1,57 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY12 +STATUS=FAIL +RC=1 +HOST=pve01 +MODE=change +COMPONENT=newfi-staging-exact-gate-container-cert-route-dns +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=6545aae57e95240862e22f28e1e6836754039d779dbf9464bb98925890f75b0f +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=true +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=FAIL +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=1 +CHANGES_MADE=true +ROLLBACK_STARTED=true +ROLLBACK_RESTORED=true +MUTATION_OUTCOME=ROLLED_BACK +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=0d1b05fda639598422d58a27c8b44a6dac62967a84aefee350a5439a61b0b28a +SANITIZED_OUTPUT_SHA256=fc78cb6c848af4a4a48a260fd3cddd611af9e0eb85b39b334355ecc8dcd52a3f +OUTPUT_BEGIN +APPLY12_BEGIN=true +COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY12 +COMPONENT=newfi-staging-exact-gate-container-cert-route-dns +MODE=change +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +REFERENCE_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED +RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +PRIOR_APPLY11_HISTORY_SHA256=6ca85bad856f1027bebc8b51f672862ae5efea522b1be882e9691f902b3e70af +APPLY10_SOURCE_HISTORY_SHA256=8af06844f666d8102ca45d689f72b1e2839c1939d144b523396d1dcf430034f0 +PORTAL_PRODUCT_STATE_GATE=PASS +STAGING_PREFLIGHT={"backend_ip":"[PRIVATE_IP]","local_http":"503"} +EXISTING_CERT_GATE={"authenticator":"dns-cloudflare","cert":"/data/tls/certbot/live/newfi-staging-gram1-ru/fullchain.pem","cert_name":"newfi-staging-gram1-ru","key":"/data/tls/certbot/live/newfi-staging-gram1-ru/privkey.pem","metadata":"subject=CN=newfi-staging.gram1.ru\nissuer=C=US, O=Let's Encrypt, CN=YE2\nnotBefore=Sep 8 05:18:03 2026 GMT\nnotAfter=Dec 7 05:18:02 2026 GMT\nserial=06CD3AC17EB3DB6B6C24F569FDF654155013","renewal":"/data/tls/certbot/renewal/newfi-staging-gram1-ru.conf","renewal_credential_host":"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","renewal_credential_inside":"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","server":"https://acme-v02.api.letsencrypt.org/directory"} +CF_TOKEN_GATE={"source_path":"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before","valid_count":1,"zone_id_sha256":"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7"} +INGRESS_PREFLIGHT={"git_direct_https":"200","ip":"185.225.35.6"} +PREFLIGHT_COMPLETE_NO_MUTATION={"acme_txt_empty":true,"backend_http":"503","existing_cert_name":"newfi-staging-gram1-ru","existing_cert_valid":true,"ingress_ip":"185.225.35.6","renewal_authenticator":"dns-cloudflare","renewal_credential_inside":"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","renewal_server":"production_letsencrypt","route_absent":true,"strict_qga_timeout_zero":true,"target_dns_empty":true} +RENEWAL_CREDENTIAL_GATE={"created_now":true,"host_path":"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","inside_path":"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","mode":"0600","zone_access":"PASS"} +ROUTE_WRITTEN={"bytes":881,"path":"/opt/npmplus/nginx/proxy_host/newfi-staging-gram1-ru.manual.conf","proof_header":"NEWFI-260908-A-STAGINGEDGE-APPLY12","sha256":"60aa17db692f36eb45b1a2837ee5c1db78248fd69228370acfc5ceda2572811a"} +APPLY12_FAILURE=ChangeError:LOCAL_TLS_503_PROOF_FAIL: +ROLLBACK_ROUTE=PASS +ROLLBACK_CREATED_RENEWAL_CREDENTIAL=PASS +FINAL_DECISION=FAIL_NEWFI_STAGING_APPLY12_ROLLBACK_RESTORED +HOMELAB_RESULT_CONTRACT={"changes_made":true,"command_id":"NEWFI-260908-A-STAGINGEDGE-APPLY12","rollback_restored":true,"rollback_started":true,"status":"FAIL","version":1} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 31dc07a8..18bf2480 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,38 +1,38 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "NEWFI-260908-A-STAGINGEDGE-APPLY11", - "status": "BLOCKED", - "rc": 2, + "command_id": "NEWFI-260908-A-STAGINGEDGE-APPLY12", + "status": "FAIL", + "rc": 1, "host": "pve01", "mode": "change", - "component": "newfi-staging-container-path-cert-route-dns", - "started_at_utc": "2026-09-08T07:05:14Z", - "finished_at_utc": "2026-09-08T07:05:14Z", + "component": "newfi-staging-exact-gate-container-cert-route-dns", + "started_at_utc": "2026-09-08T07:09:00Z", + "finished_at_utc": "2026-09-08T07:09:46Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "201ca3d3711f395ca12e4be4ee51cb8abb5cf1bb097e29382615525b05a306bd", + "command_sha256": "6545aae57e95240862e22f28e1e6836754039d779dbf9464bb98925890f75b0f", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, "change_declared": true, "result_contract_valid": true, - "result_contract_status": "BLOCKED", + "result_contract_status": "FAIL", "result_contract_error": null, - "command_rc": 2, - "changes_made": false, - "rollback_started": false, - "rollback_restored": null, - "mutation_outcome": "NO_MUTATION", + "command_rc": 1, + "changes_made": true, + "rollback_started": true, + "rollback_restored": true, + "mutation_outcome": "ROLLED_BACK", "sanitized": true, "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "a27f7e7ee0a2fc1bfa27111b5a87084d212ccdbb662e806d47d46fe0751e7193", - "sanitized_output_sha256": "a27f7e7ee0a2fc1bfa27111b5a87084d212ccdbb662e806d47d46fe0751e7193", + "raw_evidence_sha256": "0d1b05fda639598422d58a27c8b44a6dac62967a84aefee350a5439a61b0b28a", + "sanitized_output_sha256": "fc78cb6c848af4a4a48a260fd3cddd611af9e0eb85b39b334355ecc8dcd52a3f", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "APPLY11_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY11\nCOMPONENT=newfi-staging-container-path-cert-route-dns\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nAPPLY10_BLOCKED_REASON=PRIOR_APPLY10_EXACT_GATE_FAIL\nFINAL_DECISION=BLOCKED_NEWFI_STAGING_APPLY11_PRIOR_APPLY10_EXACT_GATE_FAIL\nHOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"NEWFI-260908-A-STAGINGEDGE-APPLY11\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"BLOCKED\",\"version\":1}\n" + "output": "APPLY12_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY12\nCOMPONENT=newfi-staging-exact-gate-container-cert-route-dns\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nPRIOR_APPLY11_HISTORY_SHA256=6ca85bad856f1027bebc8b51f672862ae5efea522b1be882e9691f902b3e70af\nAPPLY10_SOURCE_HISTORY_SHA256=8af06844f666d8102ca45d689f72b1e2839c1939d144b523396d1dcf430034f0\nPORTAL_PRODUCT_STATE_GATE=PASS\nSTAGING_PREFLIGHT={\"backend_ip\":\"[PRIVATE_IP]\",\"local_http\":\"503\"}\nEXISTING_CERT_GATE={\"authenticator\":\"dns-cloudflare\",\"cert\":\"/data/tls/certbot/live/newfi-staging-gram1-ru/fullchain.pem\",\"cert_name\":\"newfi-staging-gram1-ru\",\"key\":\"/data/tls/certbot/live/newfi-staging-gram1-ru/privkey.pem\",\"metadata\":\"subject=CN=newfi-staging.gram1.ru\\nissuer=C=US, O=Let's Encrypt, CN=YE2\\nnotBefore=Sep 8 05:18:03 2026 GMT\\nnotAfter=Dec 7 05:18:02 2026 GMT\\nserial=06CD3AC17EB3DB6B6C24F569FDF654155013\",\"renewal\":\"/data/tls/certbot/renewal/newfi-staging-gram1-ru.conf\",\"renewal_credential_host\":\"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"renewal_credential_inside\":\"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"server\":\"https://acme-v02.api.letsencrypt.org/directory\"}\nCF_TOKEN_GATE={\"source_path\":\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\",\"valid_count\":1,\"zone_id_sha256\":\"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7\"}\nINGRESS_PREFLIGHT={\"git_direct_https\":\"200\",\"ip\":\"185.225.35.6\"}\nPREFLIGHT_COMPLETE_NO_MUTATION={\"acme_txt_empty\":true,\"backend_http\":\"503\",\"existing_cert_name\":\"newfi-staging-gram1-ru\",\"existing_cert_valid\":true,\"ingress_ip\":\"185.225.35.6\",\"renewal_authenticator\":\"dns-cloudflare\",\"renewal_credential_inside\":\"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"renewal_server\":\"production_letsencrypt\",\"route_absent\":true,\"strict_qga_timeout_zero\":true,\"target_dns_empty\":true}\nRENEWAL_CREDENTIAL_GATE={\"created_now\":true,\"host_path\":\"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"inside_path\":\"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"mode\":\"0600\",\"zone_access\":\"PASS\"}\nROUTE_WRITTEN={\"bytes\":881,\"path\":\"/opt/npmplus/nginx/proxy_host/newfi-staging-gram1-ru.manual.conf\",\"proof_header\":\"NEWFI-260908-A-STAGINGEDGE-APPLY12\",\"sha256\":\"60aa17db692f36eb45b1a2837ee5c1db78248fd69228370acfc5ceda2572811a\"}\nAPPLY12_FAILURE=ChangeError:LOCAL_TLS_503_PROOF_FAIL:\nROLLBACK_ROUTE=PASS\nROLLBACK_CREATED_RENEWAL_CREDENTIAL=PASS\nFINAL_DECISION=FAIL_NEWFI_STAGING_APPLY12_ROLLBACK_RESTORED\nHOMELAB_RESULT_CONTRACT={\"changes_made\":true,\"command_id\":\"NEWFI-260908-A-STAGINGEDGE-APPLY12\",\"rollback_restored\":true,\"rollback_started\":true,\"status\":\"FAIL\",\"version\":1}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index cdf3d72b..015d3140 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,35 +1,35 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY11 -STATUS=BLOCKED -RC=2 +COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY12 +STATUS=FAIL +RC=1 HOST=pve01 MODE=change -COMPONENT=newfi-staging-container-path-cert-route-dns +COMPONENT=newfi-staging-exact-gate-container-cert-route-dns REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=201ca3d3711f395ca12e4be4ee51cb8abb5cf1bb097e29382615525b05a306bd +COMMAND_SHA256=6545aae57e95240862e22f28e1e6836754039d779dbf9464bb98925890f75b0f DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=true RESULT_CONTRACT_VALID=true -RESULT_CONTRACT_STATUS=BLOCKED +RESULT_CONTRACT_STATUS=FAIL RESULT_CONTRACT_ERROR=NONE -COMMAND_RC=2 -CHANGES_MADE=false -ROLLBACK_STARTED=false -ROLLBACK_RESTORED=null -MUTATION_OUTCOME=NO_MUTATION +COMMAND_RC=1 +CHANGES_MADE=true +ROLLBACK_STARTED=true +ROLLBACK_RESTORED=true +MUTATION_OUTCOME=ROLLED_BACK SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=a27f7e7ee0a2fc1bfa27111b5a87084d212ccdbb662e806d47d46fe0751e7193 -SANITIZED_OUTPUT_SHA256=a27f7e7ee0a2fc1bfa27111b5a87084d212ccdbb662e806d47d46fe0751e7193 +RAW_EVIDENCE_SHA256=0d1b05fda639598422d58a27c8b44a6dac62967a84aefee350a5439a61b0b28a +SANITIZED_OUTPUT_SHA256=fc78cb6c848af4a4a48a260fd3cddd611af9e0eb85b39b334355ecc8dcd52a3f OUTPUT_BEGIN -APPLY11_BEGIN=true -COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY11 -COMPONENT=newfi-staging-container-path-cert-route-dns +APPLY12_BEGIN=true +COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY12 +COMPONENT=newfi-staging-exact-gate-container-cert-route-dns MODE=change ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 @@ -37,9 +37,21 @@ REFERENCE_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d -APPLY10_BLOCKED_REASON=PRIOR_APPLY10_EXACT_GATE_FAIL -FINAL_DECISION=BLOCKED_NEWFI_STAGING_APPLY11_PRIOR_APPLY10_EXACT_GATE_FAIL -HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"NEWFI-260908-A-STAGINGEDGE-APPLY11","rollback_restored":null,"rollback_started":false,"status":"BLOCKED","version":1} +PRIOR_APPLY11_HISTORY_SHA256=6ca85bad856f1027bebc8b51f672862ae5efea522b1be882e9691f902b3e70af +APPLY10_SOURCE_HISTORY_SHA256=8af06844f666d8102ca45d689f72b1e2839c1939d144b523396d1dcf430034f0 +PORTAL_PRODUCT_STATE_GATE=PASS +STAGING_PREFLIGHT={"backend_ip":"[PRIVATE_IP]","local_http":"503"} +EXISTING_CERT_GATE={"authenticator":"dns-cloudflare","cert":"/data/tls/certbot/live/newfi-staging-gram1-ru/fullchain.pem","cert_name":"newfi-staging-gram1-ru","key":"/data/tls/certbot/live/newfi-staging-gram1-ru/privkey.pem","metadata":"subject=CN=newfi-staging.gram1.ru\nissuer=C=US, O=Let's Encrypt, CN=YE2\nnotBefore=Sep 8 05:18:03 2026 GMT\nnotAfter=Dec 7 05:18:02 2026 GMT\nserial=06CD3AC17EB3DB6B6C24F569FDF654155013","renewal":"/data/tls/certbot/renewal/newfi-staging-gram1-ru.conf","renewal_credential_host":"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","renewal_credential_inside":"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","server":"https://acme-v02.api.letsencrypt.org/directory"} +CF_TOKEN_GATE={"source_path":"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before","valid_count":1,"zone_id_sha256":"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7"} +INGRESS_PREFLIGHT={"git_direct_https":"200","ip":"185.225.35.6"} +PREFLIGHT_COMPLETE_NO_MUTATION={"acme_txt_empty":true,"backend_http":"503","existing_cert_name":"newfi-staging-gram1-ru","existing_cert_valid":true,"ingress_ip":"185.225.35.6","renewal_authenticator":"dns-cloudflare","renewal_credential_inside":"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","renewal_server":"production_letsencrypt","route_absent":true,"strict_qga_timeout_zero":true,"target_dns_empty":true} +RENEWAL_CREDENTIAL_GATE={"created_now":true,"host_path":"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","inside_path":"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini","mode":"0600","zone_access":"PASS"} +ROUTE_WRITTEN={"bytes":881,"path":"/opt/npmplus/nginx/proxy_host/newfi-staging-gram1-ru.manual.conf","proof_header":"NEWFI-260908-A-STAGINGEDGE-APPLY12","sha256":"60aa17db692f36eb45b1a2837ee5c1db78248fd69228370acfc5ceda2572811a"} +APPLY12_FAILURE=ChangeError:LOCAL_TLS_503_PROOF_FAIL: +ROLLBACK_ROUTE=PASS +ROLLBACK_CREATED_RENEWAL_CREDENTIAL=PASS +FINAL_DECISION=FAIL_NEWFI_STAGING_APPLY12_ROLLBACK_RESTORED +HOMELAB_RESULT_CONTRACT={"changes_made":true,"command_id":"NEWFI-260908-A-STAGINGEDGE-APPLY12","rollback_restored":true,"rollback_started":true,"status":"FAIL","version":1} OUTPUT_END CHAT_OUTPUT_END