Aria Automation Orchestrator v8.x Command Line: Deploy.sh

/opt/scripts/deploy.sh

+ trap on_exit EXIT
+ export -f wait_deploy_health
+ log_stage 'Waiting for deploy healthcheck'
+ set +x
=========================
[2026-02-07 10:28:04.035+0000] Waiting for deploy healthcheck
=========================
+ timeout 300s bash -c wait_deploy_health
Running check non-default-hostname
Running check eth0-ip
Running check node-name
Running check single-aptr
Running check nodes-ready
Running check nodes-count
Running check fips
+ source /opt/scripts/helm_utils.sh
++ export NAMESPACE_PRELUDE=prelude
++ NAMESPACE_PRELUDE=prelude
++ PREFIX=
++ [[ -d /host-root ]]
++ source /opt/scripts/retry_utils.sh
+ vracli status first-boot -w 300
First boot complete
+ '[' -z '' ']'
++ vracli -j capabilities vcoin
++ jq -j '.output_data["vcoin"]["spec"]["target_value"] // false'
+ ENABLE_VCOIN_SUPPORT=false
+ VALUES=enableResourceLimits=true
+ VALUES=enableResourceLimits=true,preferLocalEndpoints=true
++ kubectl get nodes -o name
++ wc -l
+ VALUES=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1
+ set -e
+ export -f wait_noop_pods
+ log_stage 'Waiting for command execution pods'
+ set +x
=========================
[2026-02-07 10:28:09.312+0000] Waiting for command execution pods
=========================
+ timeout 300s bash -c wait_noop_pods
+ kubectl patch vaconfig prelude-vaconfig --type json -p '[{"op": "add", "path": "/spec/deploy/ready", "value": false}]'
vaconfig.prelude.vmware.com/prelude-vaconfig patched
+ vracli db pause-failover
++ vracli load-balancer
+ FQDN=orchestrator.cloudbuildtools.com
+ '[' orchestrator.cloudbuildtools.com == '' ']'
+ '[' true = true ']'
+ INGRESS_URL=https://orchestrator.cloudbuildtools.com
+ vracli service status --set-config service.status.cache.lifetime=3600
+ log_stage 'Tear down existing deployment'
+ set +x
=========================
[2026-02-07 10:28:17.334+0000] Tear down existing deployment
=========================
+ helm ls -n prelude --short
+ xargs -r -t -n 1 -P 0 -I '{}' bash -c 'helm uninstall -n prelude --timeout=1200s {}'
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/kubernetes/admin.conf
bash -c 'helm uninstall -n prelude --timeout=1200s contour'
bash -c 'helm uninstall -n prelude --timeout=1200s db-settings'
bash -c 'helm uninstall -n prelude --timeout=1200s postgres'
bash -c 'helm uninstall -n prelude --timeout=1200s proxy-service'
bash -c 'helm uninstall -n prelude --timeout=1200s root-httpproxy'
bash -c 'helm uninstall -n prelude --timeout=1200s ui'
bash -c 'helm uninstall -n prelude --timeout=1200s vco'
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/kubernetes/admin.conf
release "db-settings" uninstalled
release "ui" uninstalled
release "root-httpproxy" uninstalled
release "proxy-service" uninstalled
release "postgres" uninstalled
release "vco" uninstalled
release "contour" uninstalled
+ k8s_delete_namespace prelude 600
+ local ns=prelude
+ [[ -z 600 ]]
+ local timeout=600
+ timeout 600s kubectl delete namespace prelude
namespace "prelude" deleted
+ local retry_interval=5
+ local retries_count=120
+ '[' 120 -eq 0 ']'
+ (( retries_count-=1 ))
++ kubectl get namespaces --no-headers
++ grep -x prelude
++ cut -f 1 -d ' '
++ wc -l
+ local found=0
+ [[ -z 0 ]]
+ '[' 0 -eq 0 ']'
+ return 0
+ timeout 300s kubectl delete clusterrolebinding prelude-view
clusterrolebinding.rbac.authorization.k8s.io "prelude-view" deleted
+ '[' false = true ']'
+ '[' false = true ']'
+ vracli cluster exec -- bash -c /opt/scripts/set_permissions_and_ownership.py
E0207 10:29:04.796547   87997 websocket.go:296] Unknown stream id 1, discarding message
DEBUG:set_permissions_and_ownership:Set RLIMIT_NOFILE to 1048576
INFO:set_permissions_and_ownership:Found group postgres with id 128
INFO:set_permissions_and_ownership:Found group root with id 0
INFO:set_permissions_and_ownership:Found user postgres with uid 128 gid 128
INFO:set_permissions_and_ownership:Found user root with uid 0 gid 0
INFO:set_permissions_and_ownership:Processing /etc/kubernetes/pki in recursive mode
++ iface-ip eth0
+ EXTERNAL_IP=10.0.18.89
+ log_stage 'Creating kubernetes namespaces'
+ set +x
=========================
[2026-02-07 10:29:05.283+0000] Creating kubernetes namespaces
=========================
+ k8s_create_namespace prelude
+ local ns=prelude
++ kubectl get namespaces --no-headers
++ cut -f 1 -d ' '
++ wc -l
++ grep -x prelude
+ [[ 0 == 0 ]]
+ kubectl create namespace prelude
namespace/prelude created
+ log_stage 'Applying ingress certificate'
+ set +x
=========================
[2026-02-07 10:29:05.485+0000] Applying ingress certificate
=========================
+ /opt/scripts/prepare_certs.sh
+ /opt/scripts/apply_certs.sh
No resources found in prelude namespace.
No resources found in prelude namespace.
secret/contour-ingress-cert-and-key created
Unable to read Aria Automation certificate configuration for 'lb':  Missing certificate configuration for  lb
Unable to read Aria Automation certificate configuration for 'proxy':  Missing certificate configuration for  proxy
kubectl -n prelude create secret generic cert-ext --from-file=fqdn.pem=/tmp/tmp.V9jShX8qyXfqdn.pem
secret/cert-ext created
+ /opt/scripts/apply_profiles.sh
Profile default-root-httpproxies: enabled
configmap/50-nginx-httpd-httpproxies.prelude-root-httpproxy.default-root-httpproxies.profile.prelude.vmware.com created
configmap/50-orchestration-ui-httpproxies.prelude-root-httpproxy.default-root-httpproxies.profile.prelude.vmware.com created
configmap/50-vco-httpproxies.prelude-root-httpproxy.default-root-httpproxies.profile.prelude.vmware.com created
Profile o11n-db: enabled
configmap/00-o11n-db.prelude-db-settings.o11n-db.profile.prelude.vmware.com created
Profile registry: enabled
configmap/50-resources.kube-system.registry.profile.prelude.vmware.com unchanged
configmap/50-resources.prelude.registry.profile.prelude.vmware.com created
Profile tcp-ecn: enabled
configmap/50-enable-tcp-ecn.prelude.tcp-ecn.profile.prelude.vmware.com created
Profile tcp-keepalive: enabled
configmap/50-sysctl.prelude.tcp-keepalive.profile.prelude.vmware.com created
Profile vcoin-support: disabled
Profile wavefront: disabled
Wavefront configuration:
{'enabled': False}
2026-02-07 10:29:17,247 [INFO] Disabling system metrics uploader
2026-02-07 10:29:17,920 [INFO] Removing wavefront proxy
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/kubernetes/admin.conf
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/kubernetes/admin.conf
Error: uninstall: Release not loaded: wavefront-proxy: release: not found
Error from server (NotFound): namespaces "wavefront" not found
++ vracli ceip status --raw
++ awk '{print tolower($0)}'
+ ENABLE_TELEMETRY=false
++ kubectl get vaconfig -o json
++ jq -r '.items[0].spec.ceip.productInstanceId'
++ sed 's/^null$//'
++ xargs
+ PRODUCT_INSTANCE_ID=
+ kubectl -n prelude create configmap telemetry-config --from-literal=endpointEnv=production --from-literal=productInstanceId=
configmap/telemetry-config created
++ vracli -j security fips
++ jq -r .output_data.fips_mode
+ FIPS_MODE=disabled
+ VALUES=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled
+ log_stage 'Updating etcd configuration to include https_proxy if such exists'
+ set +x
=========================
[2026-02-07 10:29:20.921+0000] Updating etcd configuration to include https_proxy if such exists
=========================
+ vracli proxy show
{
"config_timestamp": "1770458259",
"enabled": true,
"generation": "1770458265",
"host": "proxy-service.prelude.svc.cluster.local",
"java-proxy-exclude": "*.local|*.localdomain|localhost|127.0.0.1|127.*|kubernetes|*.cluster.local|*.svc.cluster.local|*.prelude.svc.cluster.local|orchestrator.cloudbuildtools.com|10.0.18.89|*.cloudbuildtools.com|10.244.0.*|10.244.1.*|10.244.2.*|10.244.3.*|10.244.4.*|10.244.5.*|10.244.6.*|10.244.7.*",
"java-user": null,
"password": null,
"port": 3128,
"proxy_connection_read_timeout": 15,
"proxy_dns_query_timeout": 60,
"scheme": "http",
"system-proxy-exclude": ".local,.localdomain,localhost,127.0.0.1,127.,kubernetes,.cluster.local,.svc.cluster.local,.prelude.svc.cluster.local,orchestrator.cloudbuildtools.com,10.0.18.89,.cloudbuildtools.com,10.244.0.,10.244.1.,10.244.2.,10.244.3.,10.244.4.,10.244.5.,10.244.6.,10.244.7.",
"upstream_proxy_host": null,
"upstream_proxy_password_encoded": "",
"upstream_proxy_port": null,
"upstream_proxy_user_encoded": "",
"user": null,
"user-proxy-exclude": "",
"internal.proxy.config": "# Begin autogen configuration\ndns_v4_first on \nhttp_port 0.0.0.0:3128\nlogformat squid %ts.%03tu %6tr %>a %Ss/%03>Hs %<st %rm %ru %[un %Sh/%<a %mt\ncache deny all \nappend_domain .prelude.svc.cluster.local\naccess_log stdio:/tmp/logger\ncoredump_dir /\ndns_timeout 60 seconds\nacl mylan src all\nacl proxy-exclude-domain dstdomain localhost\nacl proxy-exclude-domain dstdomain .cloudbuildtools.com\nacl proxy-exclude-domain dstdomain .local\nacl proxy-exclude-domain dstdomain .localdomain\nacl proxy-exclude-domain dstdomain kubernetes\nacl proxy-exclude-ip dst 10.0.18.89/32\nacl proxy-exclude-ip dst 10.244.0.0/21\nacl proxy-exclude-ip dst 127.0.0.0/8\nalways_direct allow proxy-exclude-ip\nalways_direct allow proxy-exclude-domain\n# Anonymize the proxy server.\nvia off\nforwarded_for delete\nhttp_access allow mylan\nhttp_access deny all\nread_timeout 15 minutes\nmax_filedescriptors 16384\n# End autogen configuration\n",
"internal.proxy.config.type": "default"
}
+ vracli proxy update-etcd
Updating etcd with internet.proxy.scheme configuration   ...  Done
Updating etcd with internet.proxy.host configuration   ...  Done
Updating etcd with internet.proxy.port configuration   ...  Done
Updating etcd with internet.proxy.user configuration  (empty) ...  Done
Updating etcd with internet.proxy.java-user configuration  (empty) ...  Done
Updating etcd with internet.proxy.java-password configuration  (empty) ...  Done
Updating etcd with internet.proxy.password configuration  (empty) ...  Done
Updating etcd with internet.proxy.java-proxy-exclude configuration   ...  Done
Updating etcd with curl.proxy.https-proxy configuration   ...  Done
Updating etcd with curl.proxy.proxy-exclude configuration   ...  Done
Updating etcd with internal.proxy.config configuration  (default) ...  Done
+ vracli ntp show-config
orchestrator.cloudbuildtools.com:
ntp_servers: ['0.uk.pool.ntp.org', '1.uk.pool.ntp.org', '2.uk.pool.ntp.org', '3.uk.pool.ntp.org']
ntp_enabled: True
vmtools_timesync_enabled: False
+ vracli ntp status
orchestrator.cloudbuildtools.com:
systemd NTP status:
Local time: Sat 2026-02-07 10:29:34 UTC
Universal time: Sat 2026-02-07 10:29:34 UTC
RTC time: Sat 2026-02-07 10:29:34
Time zone: Etc/UTC (UTC, +0000)
System clock synchronized: yes
NTP service: active
RTC in local TZ: no
ESXi time sync status: Disabled
+ source /opt/scripts/vco_utils.sh
+ create_vco_controlcenters_user_secret
+ awk -F: '$1 == "root" {print "root="$2}' /etc/shadow
+ kubectl -n prelude create secret generic vco-controlcenter-user-secret --from-file=users.properties
secret/vco-controlcenter-user-secret created
+ rm users.properties
+ kubectl create clusterrolebinding prelude-view --clusterrole=view --serviceaccount=prelude:default
clusterrolebinding.rbac.authorization.k8s.io/prelude-view created
+ VALUES=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com
+ cd /opt/charts
+ log_stage 'Deploying infrastructure services'
+ set +x
=========================
[2026-02-07 10:29:35.297+0000] Deploying infrastructure services
=========================
+ set +x
secret/db-credentials created
NAME             TYPE     DATA   AGE
db-credentials   Opaque   4      1s
vaconfig.prelude.vmware.com/prelude-vaconfig patched
+ /opt/scripts/helm-upstall --namespace=prelude --release-name=db-settings --chart-path=db-settings --set-string= --set= --timeout=
+ set +x
Exit code of install/update of release db-settings is 0
+ return 0
++ mktemp -d /tmp/ssh-keys-XXXXXXXX
+ SSH_DIR=/tmp/ssh-keys-fha7Y3fu
+ ssh-keygen -N '' -f /tmp/ssh-keys-fha7Y3fu/id_rsa
Generating public/private rsa key pair.
Your identification has been saved in /tmp/ssh-keys-fha7Y3fu/id_rsa
Your public key has been saved in /tmp/ssh-keys-fha7Y3fu/id_rsa.pub
The key fingerprint is:
SHA256:zIn3cnASMOYGbMFnILq5MlLfCWiPUf/ar4pLs2PpVUA root@orchestrator.cloudbuildtools.com
The key's randomart image is:
+---[RSA 3072]----+
|  .o+oE          |
| . .+=oo         |
|.  ..o+ .        |
| o o o = o       |
|o = . o S .      |
| + = o = =       |
|= . =.+ o o      |
|o. .+= o o       |
|   o=oo.oo.      |
+----[SHA256]-----+
++ base64 -w 0 /tmp/ssh-keys-fha7Y3fu/id_rsa
++ base64 -w 0 /tmp/ssh-keys-fha7Y3fu/id_rsa.pub
+ kubectl -n prelude create secret generic postgres-ssh --from-literal=private-key=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 --from-literal=public-key=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
secret/postgres-ssh created
+ rm -rf /tmp/ssh-keys-fha7Y3fu
+ set -x
++ date +%Y%m%d%H%M%S
+ export UPSTALL_STATUS_DIR=/tmp/deploy_20260207102938
+ UPSTALL_STATUS_DIR=/tmp/deploy_20260207102938
+ mkdir -p /tmp/deploy_20260207102938
+ vracli cluster exec -- rm -f /data/db/live/pg_stat/repmgrd_state.txt
+ helm-upstall postgres enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com prelude CHECK_DIR=/tmp/deploy_20260207102938
+ ingress_controller=contour
+ namespace=prelude
+ VALUES=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true
+ helm-upstall proxy-service enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com prelude CHECK_DIR=/tmp/deploy_20260207102938
+ log_stage 'Using ingress-controller: contour'
+ set +x
+ set +x
=========================
+ set +x
[2026-02-07 10:29:40.119+0000] Using ingress-controller: contour
=========================
+ wait_for_background_jobs
+ log_stage 'Waiting for background jobs to complete...'
+ set +x
=========================
+ helm-upstall contour enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true prelude CHECK_DIR=/tmp/deploy_20260207102938
+ set +x
+ /opt/scripts/helm-upstall --namespace=prelude --release-name=proxy-service --chart-path=proxy-service --set-string=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com --set= --timeout=
+ /opt/scripts/helm-upstall --namespace=prelude --release-name=postgres --chart-path=postgres --set-string=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com --set= --timeout=
[2026-02-07 10:29:40.124+0000] Waiting for background jobs to complete...
=========================
+ echo 'List of background jobs:'
List of background jobs:
+ jobs -l
[1]  89460 Running                 helm-upstall postgres "$VALUES" "$NAMESPACE_PRELUDE" CHECK_DIR=${UPSTALL_STATUS_DIR} &
[2]- 89461 Running                 helm-upstall proxy-service "$VALUES" "$NAMESPACE_PRELUDE" CHECK_DIR=${UPSTALL_STATUS_DIR} &
[3]+ 89469 Running                 helm-upstall "$ingress_controller" "$VALUES" $namespace ${EXTRA_VALUES} CHECK_DIR=${UPSTALL_STATUS_DIR} &
++ jobs -p
+ /opt/scripts/helm-upstall --namespace=prelude --release-name=contour --chart-path=contour --set-string=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true --set= --timeout=
+ local 'pids=89460
89461
89469'
+ '[' -n '89460
89461
89469' ']'
+ echo 'Waiting for PIDs:'
Waiting for PIDs:
+ echo 89460 89461 89469
89460 89461 89469
+ wait 89460 89461 89469
+ set +x
Exit code of install/update of release proxy-service is 0
+ return 0
+ set +x
Exit code of install/update of release postgres is 0
+ return 0
+ set +x
Exit code of install/update of release contour is 0
+ return 0
+ set +x
Failure counts are 0, from 3 finished
+ vracli service status --ignore-cache
Service                    State    Health    Nodes    CPU     Memory    Persistent Disk
-------------------------  -------  --------  -------  ------  --------  -----------------
Infrastructure
health-reporting-service   Started  Healthy   1/1      0.0 %   2 MB
kube-dns                   Started  Healthy   1/1      0.09 %  25 MB
kube-flannel-ds            Started  Healthy   1/1      0.1 %   21 MB
kubelet-rubber-stamp       Started  Healthy   1/1      0.01 %  15 MB
postgres                   Started  Healthy   1/1      1.39 %  276 MB    0 GB
predictable-pod-scheduler  Started  Healthy   1/1      0.83 %  5 MB
proxy-service              Started  Healthy   1/1      0.01 %  12 MB
Applications
ui                         Stopped
vco                        Stopped
+ export -f helm-upstall
+ export -f do-helm-upstall
+ source /opt/scripts/retry_utils.sh
++ clear-helm-upstalls-status /tmp/deploy_20260207102938
++ local dir=/tmp/deploy_20260207102938
++ rm -f '/tmp/deploy_20260207102938/*.check'
++ [[ -n '' ]]
+ export -f retry_backoff
+ vracli service status --ignore-cache
Service                    State    Health    Nodes    CPU     Memory    Persistent Disk
-------------------------  -------  --------  -------  ------  --------  -----------------
Infrastructure
health-reporting-service   Started  Healthy   1/1      0.0 %   2 MB
kube-dns                   Started  Healthy   1/1      0.09 %  25 MB
kube-flannel-ds            Started  Healthy   1/1      0.1 %   21 MB
kubelet-rubber-stamp       Started  Healthy   1/1      0.01 %  15 MB
postgres                   Started  Healthy   1/1      1.39 %  273 MB    0 GB
predictable-pod-scheduler  Started  Healthy   1/1      0.83 %  5 MB
proxy-service              Started  Healthy   1/1      0.01 %  12 MB
Applications
ui                         Stopped
vco                        Stopped
+ log_stage 'Deploying application services'
+ set +x
=========================
[2026-02-07 10:30:25.300+0000] Deploying application services
=========================
+ set -e
+ print_vco_helm_values standalone
+ local deployment=standalone
+ /opt/scripts/apply-override -p 0 -n prelude -s vco vco.deploy.prelude.vmware.com
++ kubectl get vaconfig prelude-vaconfig -o json
++ jq -r .spec.vro
+ local 'json={
"keystorePass": "w3a27pgwdEsocenm4vMq7LeNx1AnvoIF"
}'
++ jq -r .keystorePass
+ local vroKeystorePass=w3a27pgwdEsocenm4vMq7LeNx1AnvoIF
+ [[ ! -z w3a27pgwdEsocenm4vMq7LeNx1AnvoIF ]]
+ echo ''\''vroKeystorePass'\'': '\''w3a27pgwdEsocenm4vMq7LeNx1AnvoIF'\'''
++ jq -r .readTimeout
+ echo ''\''vroReadTimeout'\'': null'
++ jq -r .enableMultitenancy
+ local enableMultitenancy=null
+ [[ true != \n\u\l\l ]]
+ enableMultitenancy=false
+ echo ''\''enableMultitenancy'\'': '\''false'\'''
++ jq -r .auth
+ local auth=null
+ [[ null != \n\u\l\l ]]
+ [[ standalone == \s\t\a\n\d\a\l\o\n\e ]]
+ echo ''\''auth'\'':'
+ echo '  '\''provider'\'': '\''basic'\'''
+ [[ standalone == \s\t\a\n\d\a\l\o\n\e ]]
+ echo ''\''preserveVraPlugin'\'': '\''false'\'''
+ echo ''\''redirectToHomePage'\'': '\''true'\'''
configmap/vco.deploy.prelude.vmware.com created
+ [[ false == \t\r\u\e ]]
+ echo 'vCOIN enabled: false'
vCOIN enabled: false
+ [[ -d /data/vco/usr/lib/vco/vcoin ]]
++ kubectl get nodes -o name
++ wc -l
+ GLOBAL_VALUES=global.cluster.replicaCount=1
+ GLOBAL_VALUES=global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com
+ GLOBAL_VALUES=global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false
+ GLOBAL_VALUES=global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false,global.preferLocalEndpoints=true
+ GLOBAL_VALUES=global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false,global.preferLocalEndpoints=true,global.contour.enabled=true
+ VALUES=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true,global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false,global.preferLocalEndpoints=true,global.contour.enabled=true
+ cat
+ xargs -t -n 1 -P 0 -I % bash -c 'helm-upstall % "enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true,global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false,global.preferLocalEndpoints=true,global.contour.enabled=true" "prelude"'
bash -c 'helm-upstall vco "enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true,global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false,global.preferLocalEndpoints=true,global.contour.enabled=true" "prelude"'
bash -c 'helm-upstall ui "enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true,global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false,global.preferLocalEndpoints=true,global.contour.enabled=true" "prelude"'
+ /opt/scripts/helm-upstall --namespace=prelude --release-name=vco --chart-path=vco --set-string=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true,global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false,global.preferLocalEndpoints=true,global.contour.enabled=true --set= --timeout=
+ /opt/scripts/helm-upstall --namespace=prelude --release-name=ui --chart-path=ui --set-string=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true,global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false,global.preferLocalEndpoints=true,global.contour.enabled=true --set= --timeout=
+ set +x
Exit code of install/update of release ui is 0
+ return 0
+ set +x
Exit code of install/update of release vco is 0
+ return 0
+ vracli capabilities vcoin --status-update-preflight
2026-02-07 10:35:33,676 [INFO] Preflight passed successfully for capability [vcoin].
+ [[ false == \t\r\u\e ]]
+ vracli capabilities vcoin --status-update-commit --force
2026-02-07 10:35:35,254 [INFO] Successfully committed status update for capability [vcoin].
+ kubectl -n prelude get httpproxies.projectcontour.io '-o=jsonpath={"httpproxies:\n"}{range .items[*]}{" - httpproxy: "}{.metadata.name}{"\n"}{end}'
+ /opt/scripts/apply-override -p 0 -n prelude -s root-httpproxy root-httpproxy.deploy.prelude.vmware.com
configmap/root-httpproxy.deploy.prelude.vmware.com created
+ helm-upstall root-httpproxy enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true,global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false,global.preferLocalEndpoints=true,global.contour.enabled=true prelude CHECK_DIR=/tmp/deploy_20260207102938
+ set +x
+ /opt/scripts/helm-upstall --namespace=prelude --release-name=root-httpproxy --chart-path=root-httpproxy --set-string=enableResourceLimits=true,preferLocalEndpoints=true,cluster.replicaCount=1,enableTelemetry=false,fips_mode=disabled,FQDN=orchestrator.cloudbuildtools.com,INGRESS_URL=https://orchestrator.cloudbuildtools.com,contour.enabled=true,global.cluster.replicaCount=1,global.FQDN=orchestrator.cloudbuildtools.com,global.INGRESS_URL=https://orchestrator.cloudbuildtools.com,global.BUILD_NUMBER=,global.enableTelemetry=false,global.preferLocalEndpoints=true,global.contour.enabled=true --set= --timeout=
+ set +x
Exit code of install/update of release root-httpproxy is 0
+ return 0
+ wait_for_background_jobs
+ log_stage 'Waiting for background jobs to complete...'
+ set +x
=========================
[2026-02-07 10:35:36.788+0000] Waiting for background jobs to complete...
=========================
+ echo 'List of background jobs:'
List of background jobs:
+ jobs -l
++ jobs -p
+ local pids=
+ '[' -n '' ']'
+ echo 'No background process to wait!'
No background process to wait!
+ set +x
Failure counts are 0, from 1 finished
Service                    State    Health    Nodes    CPU      Memory    Persistent Disk
-------------------------  -------  --------  -------  -------  --------  -----------------
Infrastructure
health-reporting-service   Started  Healthy   1/1      0.0 %    2 MB
kube-dns                   Started  Healthy   1/1      0.08 %   25 MB
kube-flannel-ds            Started  Healthy   1/1      0.09 %   21 MB
kubelet-rubber-stamp       Started  Healthy   1/1      0.01 %   17 MB
postgres                   Started  Healthy   1/1      1.27 %   545 MB    0 GB
predictable-pod-scheduler  Started  Healthy   1/1      0.86 %   11 MB
proxy-service              Started  Healthy   1/1      0.01 %   14 MB
Applications
ui                         Started  Healthy   1/1      0.01 %   3 MB
vco                        Started  Healthy   1/1      45.86 %  4287 MB   1 GB
vaconfig.prelude.vmware.com/prelude-vaconfig patched
Prelude has been deployed successfully
To access, go to https://orchestrator.cloudbuildtools.com