homelab-runtime-publisher
39 lines
5.1 KiB
JSON
39 lines
5.1 KiB
JSON
{
|
|
"schema_version": 1,
|
|
"channel": "homelab-runtime",
|
|
"command_id": "NEWFI-260908-A-STAGINGEDGE-APPLY13",
|
|
"status": "FAIL",
|
|
"rc": 1,
|
|
"host": "pve01",
|
|
"mode": "change",
|
|
"component": "newfi-staging-local-proof-fix-existing-cert-route-dns",
|
|
"started_at_utc": "2026-09-08T07:23:19Z",
|
|
"finished_at_utc": "2026-09-08T07:24:05Z",
|
|
"reference_register_checked": true,
|
|
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
|
|
"error_register_checked": true,
|
|
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
|
|
"command_sha256": "81a540993275ea3e4490b436e70a575c75210637401d741d60449e5231b90cd0",
|
|
"duplicate_failed_command_blocked": false,
|
|
"block_reason": null,
|
|
"execution_started": true,
|
|
"change_declared": true,
|
|
"result_contract_valid": true,
|
|
"result_contract_status": "FAIL",
|
|
"result_contract_error": null,
|
|
"command_rc": 1,
|
|
"changes_made": true,
|
|
"rollback_started": true,
|
|
"rollback_restored": true,
|
|
"mutation_outcome": "ROLLED_BACK",
|
|
"sanitized": true,
|
|
"secrets_included": false,
|
|
"private_addresses_included": false,
|
|
"raw_evidence_retained_locally": true,
|
|
"raw_evidence_sha256": "f6bf2515e0d1852fc3ff47fc360f13571dc25f84bd97a9eb0cd7c618084a2c2d",
|
|
"sanitized_output_sha256": "fbdf5a88bdabf56bf86bc9a0ce9467fce632eef5a2f5a7f1f879d488cef225b2",
|
|
"output_truncated_in_json": false,
|
|
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
|
|
"output": "APPLY13_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY13\nCOMPONENT=newfi-staging-local-proof-fix-existing-cert-route-dns\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nPRIOR_APPLY12_HISTORY_SHA256=4b5163ee81bc5e070614287d9b524b7ab5d2962d7887f707c08b1a35d2cac9a0\nPORTAL_PRODUCT_STATE_GATE=PASS\nSTAGING_PREFLIGHT={\"backend_ip\":\"[PRIVATE_IP]\",\"local_http\":\"503\"}\nNPMPLUS_LOCAL_PROOF_TOOL_GATE={\"curl\":\"/usr/bin/curl\"}\nEXISTING_CERT_GATE={\"authenticator\":\"dns-cloudflare\",\"cert\":\"/data/tls/certbot/live/newfi-staging-gram1-ru/fullchain.pem\",\"cert_name\":\"newfi-staging-gram1-ru\",\"key\":\"/data/tls/certbot/live/newfi-staging-gram1-ru/privkey.pem\",\"metadata\":\"subject=CN=newfi-staging.gram1.ru\\nissuer=C=US, O=Let's Encrypt, CN=YE2\\nnotBefore=Sep 8 05:18:03 2026 GMT\\nnotAfter=Dec 7 05:18:02 2026 GMT\\nserial=06CD3AC17EB3DB6B6C24F569FDF654155013\",\"renewal\":\"/data/tls/certbot/renewal/newfi-staging-gram1-ru.conf\",\"renewal_credential_host\":\"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"renewal_credential_inside\":\"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"server\":\"https://acme-v02.api.letsencrypt.org/directory\"}\nCF_TOKEN_GATE={\"source_path\":\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\",\"valid_count\":1,\"zone_id_sha256\":\"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7\"}\nINGRESS_PREFLIGHT={\"git_direct_https\":\"200\",\"ip\":\"185.225.35.6\"}\nPREFLIGHT_COMPLETE_NO_MUTATION={\"acme_txt_empty\":true,\"backend_http\":\"503\",\"existing_cert_name\":\"newfi-staging-gram1-ru\",\"existing_cert_valid\":true,\"ingress_ip\":\"185.225.35.6\",\"renewal_authenticator\":\"dns-cloudflare\",\"renewal_credential_inside\":\"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"renewal_server\":\"production_letsencrypt\",\"route_absent\":true,\"strict_qga_timeout_zero\":true,\"target_dns_empty\":true}\nRENEWAL_CREDENTIAL_GATE={\"created_now\":true,\"host_path\":\"/opt/npmplus/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"inside_path\":\"/data/secure/.newfi-staging-NEWFI-260908-A-STAGINGEDGE-APPLY8.ini\",\"mode\":\"0600\",\"zone_access\":\"PASS\"}\nROUTE_WRITTEN={\"bytes\":881,\"path\":\"/opt/npmplus/nginx/proxy_host/newfi-staging-gram1-ru.manual.conf\",\"proof_header\":\"NEWFI-260908-A-STAGINGEDGE-APPLY13\",\"sha256\":\"5536ada122f3a0196d4eeb9aab593ee5960f87899df4427677db92622a7d6765\"}\nNGINX_TEST_AFTER_ROUTE=PASS\nNGINX_RELOAD=PASS\nNGINX_POSTRELOAD_TEST=PASS\nLOCAL_TLS_503_PROOF=CURL_RC=0 HTTP=503 PROOF_RC=0 BYTES=23820\nAPPLY13_FAILURE=ChangeError:PUBLIC_TLS_503_PROOF_FAIL:60:000:False:curl: (60) SSL: no alternative certificate subject name matches target hostname 'newfi-staging.gram1.ru'\\nMore details here: https://curl.se/docs/sslcerts.html\\n\\ncurl failed to verify the legitimacy of the server and therefore could not\\nestablish a secure connection to it. To learn more about this situation and\\nhow to fix it, please visit the webpage mentioned above.\\n\nROLLBACK_ROUTE=PASS\nROLLBACK_CREATED_RENEWAL_CREDENTIAL=PASS\nFINAL_DECISION=FAIL_NEWFI_STAGING_APPLY13_ROLLBACK_RESTORED\nHOMELAB_RESULT_CONTRACT={\"changes_made\":true,\"command_id\":\"NEWFI-260908-A-STAGINGEDGE-APPLY13\",\"rollback_restored\":true,\"rollback_started\":true,\"status\":\"FAIL\",\"version\":1}\n"
|
|
}
|