Started by timer Running as SYSTEM [EnvInject] - Loading node environment variables. Building remotely on prd-ubuntu1804-docker-8c-8g-6483 (ubuntu1804-docker-8c-8g) in workspace /w/workspace/integration-xtesting-security-docker-merge-master [ssh-agent] Looking for ssh-agent implementation... $ ssh-agent SSH_AUTH_SOCK=/tmp/ssh-Ydo2l4S8a57q/agent.2025 SSH_AGENT_PID=2027 [ssh-agent] Started. Running ssh-add (command line suppressed) Identity added: /w/workspace/integration-xtesting-security-docker-merge-master@tmp/private_key_6256644466557668863.key (/w/workspace/integration-xtesting-security-docker-merge-master@tmp/private_key_6256644466557668863.key) [ssh-agent] Using credentials onap-jobbuiler (Gerrit user) The recommended git tool is: NONE using credential onap-jenkins-ssh Wiping out workspace first. Cloning the remote Git repository Cloning repository git://cloud.onap.org/mirror/integration/xtesting > git init /w/workspace/integration-xtesting-security-docker-merge-master # timeout=10 Fetching upstream changes from git://cloud.onap.org/mirror/integration/xtesting > git --version # timeout=10 > git --version # 'git version 2.17.1' using GIT_SSH to set credentials Gerrit user Verifying host key using manually-configured host key entries > git fetch --tags --progress -- git://cloud.onap.org/mirror/integration/xtesting +refs/heads/*:refs/remotes/origin/* # timeout=10 > git config remote.origin.url git://cloud.onap.org/mirror/integration/xtesting # timeout=10 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10 Avoid second fetch > git rev-parse refs/remotes/origin/master^{commit} # timeout=10 Checking out Revision 604a94fe4405675fdae5d1bfb4479fb97c04aa93 (refs/remotes/origin/master) > git config core.sparsecheckout # timeout=10 > git checkout -f 604a94fe4405675fdae5d1bfb4479fb97c04aa93 # timeout=10 Commit message: "Add opentelemetry agent to xtesting images - part 2" > git rev-list --no-walk 604a94fe4405675fdae5d1bfb4479fb97c04aa93 # timeout=10 provisioning config files... copy managed file [npmrc] to file:/home/jenkins/.npmrc copy managed file [pipconf] to file:/home/jenkins/.config/pip/pip.conf [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins13567725750232993045.sh ---> python-tools-install.sh Setup pyenv: * system (set by /opt/pyenv/version) * 3.8.13 (set by /opt/pyenv/version) * 3.9.13 (set by /opt/pyenv/version) * 3.10.6 (set by /opt/pyenv/version) lf-activate-venv(): INFO: Creating python3 venv at /tmp/venv-t8kZ lf-activate-venv(): INFO: Save venv in file: /tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: lftools lf-activate-venv(): INFO: Adding /tmp/venv-t8kZ/bin to PATH Generating Requirements File ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts. httplib2 0.30.2 requires pyparsing<4,>=3.0.4, but you have pyparsing 2.4.7 which is incompatible. Python 3.10.6 pip 26.0.1 from /tmp/venv-t8kZ/lib/python3.10/site-packages/pip (python 3.10) appdirs==1.4.4 argcomplete==3.6.3 aspy.yaml==1.3.0 attrs==25.4.0 autopage==0.6.0 backports.strenum==1.3.1 beautifulsoup4==4.14.3 boto3==1.42.44 botocore==1.42.44 bs4==0.0.2 certifi==2026.1.4 cffi==2.0.0 cfgv==3.5.0 chardet==5.2.0 charset-normalizer==3.4.4 click==8.3.1 cliff==4.13.1 cmd2==3.2.0 cryptography==3.3.2 debtcollector==3.0.0 decorator==5.2.1 defusedxml==0.7.1 Deprecated==1.3.1 distlib==0.4.0 dnspython==2.8.0 docker==7.1.0 dogpile.cache==1.5.0 durationpy==0.10 email-validator==2.3.0 filelock==3.20.3 future==1.0.0 gitdb==4.0.12 GitPython==3.1.46 httplib2==0.30.2 identify==2.6.16 idna==3.11 importlib-resources==1.5.0 iso8601==2.1.0 Jinja2==3.1.6 jmespath==1.1.0 jsonpatch==1.33 jsonpointer==3.0.0 jsonschema==4.26.0 jsonschema-specifications==2025.9.1 keystoneauth1==5.13.0 kubernetes==35.0.0 lftools==0.37.21 lxml==6.0.2 markdown-it-py==4.0.0 MarkupSafe==3.0.3 mdurl==0.1.2 msgpack==1.1.2 multi_key_dict==2.0.3 munch==4.0.0 netaddr==1.3.0 niet==1.4.2 nodeenv==1.10.0 oauth2client==4.1.3 oauthlib==3.3.1 openstacksdk==4.9.0 os-service-types==1.8.2 osc-lib==4.3.0 oslo.config==10.2.0 oslo.context==6.2.0 oslo.i18n==6.7.1 oslo.log==8.0.0 oslo.serialization==5.9.0 oslo.utils==9.2.0 packaging==26.0 pbr==7.0.3 platformdirs==4.5.1 prettytable==3.17.0 psutil==7.2.2 pyasn1==0.6.2 pyasn1_modules==0.4.2 pycparser==3.0 pygerrit2==2.0.15 PyGithub==2.8.1 Pygments==2.19.2 PyJWT==2.11.0 PyNaCl==1.6.2 pyparsing==2.4.7 pyperclip==1.11.0 pyrsistent==0.20.0 python-cinderclient==9.8.0 python-dateutil==2.9.0.post0 python-heatclient==5.0.0 python-jenkins==1.8.3 python-keystoneclient==5.7.0 python-magnumclient==4.9.0 python-openstackclient==8.3.0 python-swiftclient==4.9.0 PyYAML==6.0.3 referencing==0.37.0 requests==2.32.5 requests-oauthlib==2.0.0 requestsexceptions==1.4.0 rfc3986==2.0.0 rich==14.3.2 rich-argparse==1.7.2 rpds-py==0.30.0 rsa==4.9.1 ruamel.yaml==0.19.1 ruamel.yaml.clib==0.2.15 s3transfer==0.16.0 simplejson==3.20.2 six==1.17.0 smmap==5.0.2 soupsieve==2.8.3 stevedore==5.6.0 tabulate==0.9.0 toml==0.10.2 tomlkit==0.14.0 tqdm==4.67.3 typing_extensions==4.15.0 tzdata==2025.3 urllib3==1.26.20 virtualenv==20.36.1 wcwidth==0.6.0 websocket-client==1.9.0 wrapt==2.1.1 xdg==6.0.0 xmltodict==1.0.2 yq==3.4.3 provisioning config files... copy managed file [global-settings] to file:/w/workspace/integration-xtesting-security-docker-merge-master@tmp/config7595324272373332751tmp copy managed file [integration-settings] to file:/w/workspace/integration-xtesting-security-docker-merge-master@tmp/config9201206056720631521tmp [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins8472854152564626609.sh ---> docker-login.sh nexus3.onap.org:10001 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded nexus3.onap.org:10002 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded nexus3.onap.org:10003 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded nexus3.onap.org:10004 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded docker.io WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded ---> docker-login.sh ends [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins3135974746279510183.sh [integration-xtesting-security-docker-merge-master] $ /bin/sh -xe /tmp/jenkins9485483055680469250.sh [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content DOCKER_ROOT=./security CONTAINER_TAG_YAML_DIR= CONTAINER_TAG_METHOD=stream [EnvInject] - Variables injected successfully. [integration-xtesting-security-docker-merge-master] $ /bin/bash -l /tmp/jenkins11357655316641883721.sh ---> docker-get-container-tag.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/integration-xtesting-security-docker-merge-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-t8kZ from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: yq lf-activate-venv(): INFO: Adding /tmp/venv-t8kZ/bin to PATH ---> Docker image tag found: master [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties file path 'env_docker_inject.txt' [EnvInject] - Variables injected successfully. [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content DOCKER_ARGS=-f ./docker/Dockerfile DOCKER_ROOT=./security CONTAINER_PULL_REGISTRY=nexus3.onap.org:10001 CONTAINER_PUSH_REGISTRY=nexus3.onap.org:10003 DOCKER_NAME=onap/xtesting-security [EnvInject] - Variables injected successfully. [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins793516956228207262.sh ---> docker-build.sh Docker version 20.10.18, build b40c2f6 Building image: nexus3.onap.org:10003/onap/xtesting-security:master docker build -f ./docker/Dockerfile -t nexus3.onap.org:10003/onap/xtesting-security:master . Sending build context to Docker daemon 41.98kB Step 1/27 : FROM golang:1.24 AS build_yq 1.24: Pulling from library/golang ef235bf1a09a: Pulling fs layer 954d6059ca7b: Pulling fs layer b5e2021c4c8b: Pulling fs layer b2b04fcbed4b: Pulling fs layer f7bdfd728ac2: Pulling fs layer 50a27cd32f89: Pulling fs layer 4f4fb700ef54: Pulling fs layer b2b04fcbed4b: Waiting f7bdfd728ac2: Waiting 50a27cd32f89: Waiting 4f4fb700ef54: Waiting ef235bf1a09a: Verifying Checksum ef235bf1a09a: Download complete b5e2021c4c8b: Verifying Checksum b5e2021c4c8b: Download complete 954d6059ca7b: Verifying Checksum 954d6059ca7b: Download complete 50a27cd32f89: Verifying Checksum 50a27cd32f89: Download complete ef235bf1a09a: Pull complete 4f4fb700ef54: Verifying Checksum 4f4fb700ef54: Download complete b2b04fcbed4b: Download complete 954d6059ca7b: Pull complete f7bdfd728ac2: Verifying Checksum f7bdfd728ac2: Download complete b5e2021c4c8b: Pull complete b2b04fcbed4b: Pull complete f7bdfd728ac2: Pull complete 50a27cd32f89: Pull complete 4f4fb700ef54: Pull complete Digest: sha256:d2d2bc1c84f7e60d7d2438a3836ae7d0c847f4888464e7ec9ba3a1339a1ee804 Status: Downloaded newer image for golang:1.24 ---> 00925efecb9c Step 2/27 : WORKDIR /go/src/github.com/mikefarah/ ---> Running in 58f36f8e580b Removing intermediate container 58f36f8e580b ---> 302409b5656b Step 3/27 : RUN git clone https://github.com/mikefarah/yq.git --depth 1 ---> Running in 7aff2363704d Cloning into 'yq'... Removing intermediate container 7aff2363704d ---> 7326819402da Step 4/27 : WORKDIR /go/src/github.com/mikefarah/yq ---> Running in 87d01b77eacf Removing intermediate container 87d01b77eacf ---> b18c7cbb87e4 Step 5/27 : RUN go mod tidy ---> Running in 86131cd2edc1 go: downloading github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e go: downloading golang.org/x/mod v0.31.0 go: downloading github.com/spf13/cobra v1.10.2 go: downloading github.com/spf13/pflag v1.0.10 go: downloading gopkg.in/op/go-logging.v1 v1.0.0-20160211212156-b2cb9fa56473 go: downloading github.com/a8m/envsubst v1.4.3 go: downloading github.com/alecthomas/participle/v2 v2.1.4 go: downloading github.com/dimchansky/utfbom v1.1.1 go: downloading github.com/elliotchance/orderedmap v1.8.0 go: downloading github.com/fatih/color v1.18.0 go: downloading github.com/go-ini/ini v1.67.0 go: downloading github.com/goccy/go-json v0.10.5 go: downloading github.com/goccy/go-yaml v1.19.2 go: downloading github.com/hashicorp/hcl/v2 v2.24.0 go: downloading github.com/jinzhu/copier v0.4.0 go: downloading github.com/magiconair/properties v1.8.10 go: downloading github.com/pelletier/go-toml/v2 v2.2.4 go: downloading github.com/yuin/gopher-lua v1.1.1 go: downloading github.com/zclconf/go-cty v1.17.0 go: downloading go.yaml.in/yaml/v4 v4.0.0-rc.3 go: downloading golang.org/x/net v0.49.0 go: downloading golang.org/x/text v0.33.0 go: downloading github.com/alecthomas/repr v0.5.2 go: downloading golang.org/x/tools v0.40.0 go: downloading github.com/inconshreveable/mousetrap v1.1.0 go: downloading github.com/mattn/go-colorable v0.1.14 go: downloading github.com/mattn/go-isatty v0.0.20 go: downloading golang.org/x/sys v0.40.0 go: downloading github.com/agext/levenshtein v1.2.1 go: downloading github.com/apparentlymart/go-textseg/v15 v15.0.0 go: downloading github.com/mitchellh/go-wordwrap v1.0.1 go: downloading github.com/alecthomas/assert/v2 v2.11.0 go: downloading github.com/stretchr/testify v1.7.0 go: downloading github.com/davecgh/go-spew v1.1.1 go: downloading github.com/go-test/deep v1.0.3 go: downloading github.com/google/go-cmp v0.6.0 go: downloading github.com/zclconf/go-cty-debug v0.0.0-20240509010212-0d6042c53940 go: downloading github.com/hexops/gotextdiff v1.0.3 go: downloading github.com/pmezard/go-difflib v1.0.0 go: downloading gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c go: downloading golang.org/x/sync v0.19.0 Removing intermediate container 86131cd2edc1 ---> 7710039964a2 Step 6/27 : RUN CGO_ENABLED=0 go install -a -ldflags '-w -s -extldflags "-static"' ---> Running in c219506d96b8 Removing intermediate container c219506d96b8 ---> 3a6599b50e78 Step 7/27 : FROM golang:1.19 AS build_onap 1.19: Pulling from library/golang 012c0b3e998c: Pulling fs layer 00046d1e755e: Pulling fs layer 9f13f5a53d11: Pulling fs layer 190fa1651026: Pulling fs layer 0808c6468790: Pulling fs layer 5ec11cb68eac: Pulling fs layer 0808c6468790: Waiting 190fa1651026: Waiting 5ec11cb68eac: Waiting 00046d1e755e: Verifying Checksum 00046d1e755e: Download complete 9f13f5a53d11: Verifying Checksum 9f13f5a53d11: Download complete 012c0b3e998c: Verifying Checksum 012c0b3e998c: Download complete 5ec11cb68eac: Download complete 190fa1651026: Verifying Checksum 190fa1651026: Download complete 012c0b3e998c: Pull complete 00046d1e755e: Pull complete 0808c6468790: Verifying Checksum 0808c6468790: Download complete 9f13f5a53d11: Pull complete 190fa1651026: Pull complete 0808c6468790: Pull complete 5ec11cb68eac: Pull complete Digest: sha256:3025bf670b8363ec9f1b4c4f27348e6d9b7fec607c47e401e40df816853e743a Status: Downloaded newer image for golang:1.19 ---> 80b76a6c918c Step 8/27 : WORKDIR /opt/onap ---> Running in 019d05d983e3 Removing intermediate container 019d05d983e3 ---> a1097a76d00c Step 9/27 : RUN git clone https://git.onap.org/integration --depth 1 ---> Running in 0a0e7367a4c7 Cloning into 'integration'... Removing intermediate container 0a0e7367a4c7 ---> 25911539a3ba Step 10/27 : WORKDIR /opt/onap/integration/test/security/sslendpoints ---> Running in 8bca652e497c Removing intermediate container 8bca652e497c ---> 53c14596e716 Step 11/27 : RUN go mod tidy ---> Running in d7ab2e262dac go: downloading k8s.io/apimachinery v0.17.3 go: downloading github.com/onsi/ginkgo v1.10.1 go: downloading k8s.io/api v0.17.3 go: downloading github.com/Ullaakut/nmap v2.0.0+incompatible go: downloading github.com/onsi/gomega v1.7.0 go: downloading k8s.io/client-go v0.0.0-20190819141724-e14f31a72a77 go: downloading github.com/stretchr/testify v1.4.0 go: downloading golang.org/x/net v0.0.0-20191004110552-13f9640d40b9 go: downloading gopkg.in/yaml.v2 v2.2.8 go: downloading github.com/hpcloud/tail v1.0.0 go: downloading golang.org/x/sys v0.0.0-20190826190057-c7b8b68b1456 go: downloading github.com/davecgh/go-spew v1.1.1 go: downloading github.com/pmezard/go-difflib v1.0.0 go: downloading gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 go: downloading gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 go: downloading github.com/golang/protobuf v1.3.2 go: downloading gopkg.in/fsnotify.v1 v1.4.7 go: downloading github.com/gogo/protobuf v1.2.2-0.20190723190241-65acae22fc9d go: downloading github.com/google/gofuzz v1.0.0 go: downloading sigs.k8s.io/yaml v1.1.0 go: downloading github.com/kr/pretty v0.1.0 go: downloading github.com/fsnotify/fsnotify v1.4.7 go: downloading gopkg.in/inf.v0 v0.9.1 go: downloading github.com/spf13/pflag v1.0.5 go: downloading k8s.io/klog v1.0.0 go: downloading github.com/json-iterator/go v1.1.8 go: downloading github.com/modern-go/reflect2 v1.0.1 go: downloading github.com/google/go-cmp v0.3.0 go: downloading github.com/kr/text v0.1.0 go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd go: downloading golang.org/x/text v0.3.2 go: downloading github.com/imdario/mergo v0.3.8 go: downloading golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2 go: downloading github.com/googleapis/gnostic v0.0.0-20170729233727-0c5108395e2d go: downloading golang.org/x/time v0.0.0-20191024005414-555d28b269f0 go: downloading k8s.io/utils v0.0.0-20200124190032-861946025e34 go: downloading golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d go: downloading google.golang.org/appengine v1.5.0 Removing intermediate container d7ab2e262dac ---> a14294447c22 Step 12/27 : RUN CGO_ENABLED=0 go install -a -ldflags '-w -s -extldflags "-static"' ---> Running in bf4e2815323a Removing intermediate container bf4e2815323a ---> a94b77ec8e01 Step 13/27 : FROM opnfv/xtesting:wallaby AS run wallaby: Pulling from opnfv/xtesting 72cfd02ff4d0: Pulling fs layer 2dd6b71b7b2e: Pulling fs layer 5ff4388fefac: Pulling fs layer 5ff4388fefac: Verifying Checksum 5ff4388fefac: Download complete 72cfd02ff4d0: Verifying Checksum 72cfd02ff4d0: Download complete 72cfd02ff4d0: Pull complete 2dd6b71b7b2e: Verifying Checksum 2dd6b71b7b2e: Download complete 2dd6b71b7b2e: Pull complete 5ff4388fefac: Pull complete Digest: sha256:5b1c7d739602557beff53093f25aaa6414da2f6048a31b6973c4e2a121383e64 Status: Downloaded newer image for opnfv/xtesting:wallaby ---> 5443c299b496 Step 14/27 : ARG KUBERNETES_VERSION="v1.23.8" ---> Running in 378dfddf802c Removing intermediate container 378dfddf802c ---> 1043ffd4d32a Step 15/27 : ARG ONAP_TAG=master ---> Running in 38323a7b76bb Removing intermediate container 38323a7b76bb ---> 4c6bd77c5d3b Step 16/27 : ARG ONAP_TESTS_TAG=master ---> Running in c9bbbd2b2c3c Removing intermediate container c9bbbd2b2c3c ---> d65020001ca7 Step 17/27 : ADD https://storage.googleapis.com/kubernetes-release/release/${KUBERNETES_VERSION}/bin/linux/amd64/kubectl /usr/local/bin/kubectl ---> 7851fff1a213 Step 18/27 : COPY scripts/check_security_root.sh /check_security_root.sh ---> 036153a2cd12 Step 19/27 : COPY scripts/check_unlimitted_pods.sh /check_unlimitted_pods.sh ---> a9361fecd198 Step 20/27 : COPY scripts/check_cis_kubernetes.sh /check_cis_kubernetes.sh ---> 09eceec620e6 Step 21/27 : COPY scripts/check_versions.sh /check_versions.sh ---> 7ce16d0c9cfa Step 22/27 : COPY --from=build_yq /go/bin/yq /usr/local/bin/yq ---> a702e2de1efe Step 23/27 : COPY --from=build_onap /go/bin/sslendpoints /usr/local/bin/sslendpoints ---> 4886accbcbe6 Step 24/27 : COPY upper-constraints.txt /upper-constraints.txt ---> a7ff64452846 Step 25/27 : RUN set -x && apk --no-cache add --update curl ca-certificates openssl procps util-linux nmap nmap-scripts jq && apk --no-cache add --virtual .build-deps --update python3-dev linux-headers gcc musl-dev && chmod +x /usr/local/bin/kubectl && git clone https://github.com/aquasecurity/kube-hunter.git /kube-hunter && mkdir /check_versions && adduser kubectl -Du 2342 -h /config && wget -O /check_for_nonssl_endpoints.sh https://git.onap.org/integration/plain/test/security/check_for_nonssl_endpoints.sh?h=$ONAP_TAG && wget -O /check_for_jdwp.sh https://git.onap.org/integration/plain/test/security/check_for_jdwp.sh?h=$ONAP_TAG && wget -O /jdwp_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/jdwp_ports/jdwp_xfail.txt?h=$ONAP_TAG && wget -O /nonssl_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/nonssl_endpoints/nonssl_xfail.txt?h=$ONAP_TAG && wget -O /root_pods_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/root_pods/root_pods_xfail.txt?h=$ONAP_TAG && wget -O /unlimitted_pods_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/unlimitted_pods/unlimitted_pods_xfail.txt?h=$ONAP_TAG && wget -O /check_versions/k8s_bin_versions_inspector.py https://git.onap.org/integration/plain/test/security/check_versions/versions/k8s_bin_versions_inspector.py?h=$ONAP_TAG && wget -O /check_versions/requirements.txt https://git.onap.org/integration/plain/test/security/check_versions/requirements.txt?h=$ONAP_TAG && wget -O /check_versions/recommended_versions.yaml https://git.onap.org/integration/seccom/plain/recommended_versions.yaml?h=$ONAP_TAG && chmod +x /usr/local/bin/sslendpoints && chmod +x /check_*.sh && rm -rf /usr/lib/python3.8/site-packages/PyYAML* && pip3 install --no-cache-dir git+https://git.onap.org/integration/xtesting.git@$ONAP_TESTS_TAG#subdirectory=security && cd /kube-hunter && pip3 install -c /upper-constraints.txt -r /kube-hunter/requirements.txt && pip3 install --no-cache-dir git+https://git.onap.org/integration.git@$ONAP_TESTS_TAG#subdirectory=test/security/check_versions && apk del .build-deps ---> Running in 2f78fc929c74 + apk --no-cache add --update curl ca-certificates openssl procps util-linux nmap nmap-scripts jq fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/main/x86_64/APKINDEX.tar.gz fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/community/x86_64/APKINDEX.tar.gz (1/33) Installing curl (7.79.1-r3) (2/33) Installing oniguruma (6.9.6-r0) (3/33) Installing jq (1.6-r1) (4/33) Installing libgcc (10.2.1_pre1-r3) (5/33) Installing lua5.3-libs (5.3.6-r0) (6/33) Installing libpcap (1.10.0-r0) (7/33) Installing pcre (8.44-r0) (8/33) Installing libssh2 (1.9.0-r1) (9/33) Installing libstdc++ (10.2.1_pre1-r3) (10/33) Installing nmap (7.91-r0) (11/33) Installing nmap-nselibs (7.91-r0) (12/33) Installing nmap-scripts (7.91-r0) (13/33) Installing openssl (1.1.1s-r0) (14/33) Installing libintl (0.20.2-r2) (15/33) Installing libproc (3.3.16-r0) (16/33) Installing procps (3.3.16-r0) (17/33) Installing libblkid (2.37.4-r0) (18/33) Installing blkid (2.37.4-r0) (19/33) Installing libcap-ng (0.8.2-r0) (20/33) Installing setpriv (2.37.4-r0) (21/33) Installing libmount (2.37.4-r0) (22/33) Installing libsmartcols (2.37.4-r0) (23/33) Installing findmnt (2.37.4-r0) (24/33) Installing mcookie (2.37.4-r0) (25/33) Installing hexdump (2.37.4-r0) (26/33) Installing lsblk (2.37.4-r0) (27/33) Installing libuuid (2.37.4-r0) (28/33) Installing libfdisk (2.37.4-r0) (29/33) Installing sfdisk (2.37.4-r0) (30/33) Installing cfdisk (2.37.4-r0) (31/33) Installing partx (2.37.4-r0) (32/33) Installing libeconf (0.3.8-r0) (33/33) Installing util-linux (2.37.4-r0) Executing busybox-1.32.1-r9.trigger OK: 517 MiB in 109 packages + apk --no-cache add --virtual .build-deps --update python3-dev linux-headers gcc musl-dev fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/main/x86_64/APKINDEX.tar.gz fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/community/x86_64/APKINDEX.tar.gz (1/14) Installing pkgconf (1.7.3-r0) (2/14) Installing python3-dev (3.8.15-r0) (3/14) Installing linux-headers (5.7.8-r0) (4/14) Installing binutils (2.35.2-r1) (5/14) Installing libgomp (10.2.1_pre1-r3) (6/14) Installing libatomic (10.2.1_pre1-r3) (7/14) Installing libgphobos (10.2.1_pre1-r3) (8/14) Installing gmp (6.2.1-r1) (9/14) Installing isl22 (0.22-r0) (10/14) Installing mpfr4 (4.1.0-r0) (11/14) Installing mpc1 (1.2.0-r0) (12/14) Installing gcc (10.2.1_pre1-r3) (13/14) Installing musl-dev (1.2.2-r2) (14/14) Installing .build-deps (20260209.142359) Executing busybox-1.32.1-r9.trigger OK: 682 MiB in 123 packages + chmod +x /usr/local/bin/kubectl + git clone https://github.com/aquasecurity/kube-hunter.git /kube-hunter Cloning into '/kube-hunter'... + mkdir /check_versions + adduser kubectl -Du 2342 -h /config + wget -O /check_for_nonssl_endpoints.sh 'https://git.onap.org/integration/plain/test/security/check_for_nonssl_endpoints.sh?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/check_for_nonssl_endpoints.sh' check_for_nonssl_end 100% |********************************| 3069 0:00:00 ETA '/check_for_nonssl_endpoints.sh' saved + wget -O /check_for_jdwp.sh 'https://git.onap.org/integration/plain/test/security/check_for_jdwp.sh?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/check_for_jdwp.sh' check_for_jdwp.sh 100% |********************************| 3057 0:00:00 ETA '/check_for_jdwp.sh' saved + wget -O /jdwp_xfail.txt 'https://git.onap.org/integration/seccom/plain/waivers/jdwp_ports/jdwp_xfail.txt?h=master' Connecting to git.onap.org (199.204.45.130:443) wget: server returned error: HTTP/1.1 500 Internal Server Error The command '/bin/sh -c set -x && apk --no-cache add --update curl ca-certificates openssl procps util-linux nmap nmap-scripts jq && apk --no-cache add --virtual .build-deps --update python3-dev linux-headers gcc musl-dev && chmod +x /usr/local/bin/kubectl && git clone https://github.com/aquasecurity/kube-hunter.git /kube-hunter && mkdir /check_versions && adduser kubectl -Du 2342 -h /config && wget -O /check_for_nonssl_endpoints.sh https://git.onap.org/integration/plain/test/security/check_for_nonssl_endpoints.sh?h=$ONAP_TAG && wget -O /check_for_jdwp.sh https://git.onap.org/integration/plain/test/security/check_for_jdwp.sh?h=$ONAP_TAG && wget -O /jdwp_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/jdwp_ports/jdwp_xfail.txt?h=$ONAP_TAG && wget -O /nonssl_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/nonssl_endpoints/nonssl_xfail.txt?h=$ONAP_TAG && wget -O /root_pods_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/root_pods/root_pods_xfail.txt?h=$ONAP_TAG && wget -O /unlimitted_pods_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/unlimitted_pods/unlimitted_pods_xfail.txt?h=$ONAP_TAG && wget -O /check_versions/k8s_bin_versions_inspector.py https://git.onap.org/integration/plain/test/security/check_versions/versions/k8s_bin_versions_inspector.py?h=$ONAP_TAG && wget -O /check_versions/requirements.txt https://git.onap.org/integration/plain/test/security/check_versions/requirements.txt?h=$ONAP_TAG && wget -O /check_versions/recommended_versions.yaml https://git.onap.org/integration/seccom/plain/recommended_versions.yaml?h=$ONAP_TAG && chmod +x /usr/local/bin/sslendpoints && chmod +x /check_*.sh && rm -rf /usr/lib/python3.8/site-packages/PyYAML* && pip3 install --no-cache-dir git+https://git.onap.org/integration/xtesting.git@$ONAP_TESTS_TAG#subdirectory=security && cd /kube-hunter && pip3 install -c /upper-constraints.txt -r /kube-hunter/requirements.txt && pip3 install --no-cache-dir git+https://git.onap.org/integration.git@$ONAP_TESTS_TAG#subdirectory=test/security/check_versions && apk del .build-deps' returned a non-zero code: 1 Build step 'Execute shell' marked build as failure $ ssh-agent -k unset SSH_AUTH_SOCK; unset SSH_AGENT_PID; echo Agent pid 2027 killed; [ssh-agent] Stopped. [PostBuildScript] - [INFO] Executing post build scripts. [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins11237775833639541329.sh ---> sysstat.sh [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins14552396233327155717.sh ---> package-listing.sh ++ facter osfamily ++ tr '[:upper:]' '[:lower:]' + OS_FAMILY=debian + workspace=/w/workspace/integration-xtesting-security-docker-merge-master + START_PACKAGES=/tmp/packages_start.txt + END_PACKAGES=/tmp/packages_end.txt + DIFF_PACKAGES=/tmp/packages_diff.txt + PACKAGES=/tmp/packages_start.txt + '[' /w/workspace/integration-xtesting-security-docker-merge-master ']' + PACKAGES=/tmp/packages_end.txt + case "${OS_FAMILY}" in + dpkg -l + grep '^ii' + '[' -f /tmp/packages_start.txt ']' + '[' -f /tmp/packages_end.txt ']' + diff /tmp/packages_start.txt /tmp/packages_end.txt + '[' /w/workspace/integration-xtesting-security-docker-merge-master ']' + mkdir -p /w/workspace/integration-xtesting-security-docker-merge-master/archives/ + cp -f /tmp/packages_diff.txt /tmp/packages_end.txt /tmp/packages_start.txt /w/workspace/integration-xtesting-security-docker-merge-master/archives/ [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins10902274702049291659.sh ---> capture-instance-metadata.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/integration-xtesting-security-docker-merge-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-t8kZ from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: lftools lf-activate-venv(): INFO: Adding /tmp/venv-t8kZ/bin to PATH INFO: Running in OpenStack, capturing instance metadata [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins14659482123511189819.sh provisioning config files... copy managed file [jenkins-log-archives-settings] to file:/w/workspace/integration-xtesting-security-docker-merge-master@tmp/config13240409279186424767tmp Regular expression run condition: Expression=[^.*logs-s3.*], Label=[] Run condition [Regular expression match] preventing perform for step [Provide Configuration files] [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content SERVER_ID=logs [EnvInject] - Variables injected successfully. [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins9348591725424111973.sh ---> create-netrc.sh [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins4031666715044296550.sh ---> python-tools-install.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/integration-xtesting-security-docker-merge-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-t8kZ from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: lftools lf-activate-venv(): INFO: Adding /tmp/venv-t8kZ/bin to PATH [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins13707086282556670478.sh ---> sudo-logs.sh Archiving 'sudo' log.. [integration-xtesting-security-docker-merge-master] $ /bin/bash /tmp/jenkins17991764421969294898.sh ---> job-cost.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/integration-xtesting-security-docker-merge-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-t8kZ from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: zipp==1.1.0 python-openstackclient urllib3~=1.26.15 lf-activate-venv(): INFO: Adding /tmp/venv-t8kZ/bin to PATH INFO: No Stack... INFO: Retrieving Pricing Info for: v3-standard-8 INFO: Archiving Costs [integration-xtesting-security-docker-merge-master] $ /bin/bash -l /tmp/jenkins6374024728287477234.sh ---> logs-deploy.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/integration-xtesting-security-docker-merge-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-t8kZ from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: lftools urllib3~=1.26.15 lf-activate-venv(): INFO: Adding /tmp/venv-t8kZ/bin to PATH INFO: Nexus URL https://nexus.onap.org path production/vex-yul-ecomp-jenkins-1/integration-xtesting-security-docker-merge-master/1490 INFO: archiving workspace using pattern(s): Archives upload complete. INFO: archiving logs to Nexus ---> uname -a: Linux prd-ubuntu1804-docker-8c-8g-6483 4.15.0-192-generic #203-Ubuntu SMP Wed Aug 10 17:40:03 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux ---> lscpu: Architecture: x86_64 CPU op-mode(s): 32-bit, 64-bit Byte Order: Little Endian CPU(s): 8 On-line CPU(s) list: 0-7 Thread(s) per core: 1 Core(s) per socket: 1 Socket(s): 8 NUMA node(s): 1 Vendor ID: AuthenticAMD CPU family: 23 Model: 49 Model name: AMD EPYC-Rome Processor Stepping: 0 CPU MHz: 2799.998 BogoMIPS: 5599.99 Virtualization: AMD-V Hypervisor vendor: KVM Virtualization type: full L1d cache: 32K L1i cache: 32K L2 cache: 512K L3 cache: 16384K NUMA node0 CPU(s): 0-7 Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm rep_good nopl xtopology cpuid extd_apicid tsc_known_freq pni pclmulqdq ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm cmp_legacy svm cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw topoext perfctr_core ssbd ibrs ibpb stibp vmmcall fsgsbase tsc_adjust bmi1 avx2 smep bmi2 rdseed adx smap clflushopt clwb sha_ni xsaveopt xsavec xgetbv1 xsaves clzero xsaveerptr arat npt nrip_save umip rdpid arch_capabilities ---> nproc: 8 ---> df -h: Filesystem Size Used Avail Use% Mounted on udev 16G 0 16G 0% /dev tmpfs 3.2G 712K 3.2G 1% /run /dev/vda1 155G 14G 142G 9% / tmpfs 16G 0 16G 0% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 16G 0 16G 0% /sys/fs/cgroup /dev/vda15 105M 4.4M 100M 5% /boot/efi tmpfs 3.2G 0 3.2G 0% /run/user/1001 ---> free -m: total used free shared buff/cache available Mem: 32167 826 25124 0 6216 30886 Swap: 1023 0 1023 ---> ip addr: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: ens3: mtu 1458 qdisc mq state UP group default qlen 1000 link/ether fa:16:3e:2c:54:49 brd ff:ff:ff:ff:ff:ff inet 10.30.106.62/23 brd 10.30.107.255 scope global dynamic ens3 valid_lft 86133sec preferred_lft 86133sec inet6 fe80::f816:3eff:fe2c:5449/64 scope link valid_lft forever preferred_lft forever 3: docker0: mtu 1500 qdisc noqueue state DOWN group default link/ether 02:42:d2:d0:5e:ef brd ff:ff:ff:ff:ff:ff inet 10.250.0.254/24 brd 10.250.0.255 scope global docker0 valid_lft forever preferred_lft forever inet6 fe80::42:d2ff:fed0:5eef/64 scope link valid_lft forever preferred_lft forever ---> sar -b -r -n DEV: Linux 4.15.0-192-generic (prd-ubuntu1804-docker-8c-8g-6483) 02/09/26 _x86_64_ (8 CPU) 14:20:21 LINUX RESTART (8 CPU) 14:21:01 tps rtps wtps bread/s bwrtn/s 14:22:01 181.29 10.38 170.90 1304.05 99392.50 14:23:01 293.13 2.28 290.85 358.47 98784.34 14:24:01 321.14 0.37 320.78 15.06 66486.90 Average: 265.19 4.34 260.85 559.16 88220.04 14:21:01 kbmemfree kbavail kbmemused %memused kbbuffers kbcached kbcommit %commit kbactive kbinact kbdirty 14:22:01 29002916 31701912 3936304 11.95 99088 2862208 1477112 4.35 907696 2641612 1078308 14:23:01 27411892 31688012 5527328 16.78 137292 4289448 1507564 4.44 1035976 3984336 216 14:24:01 25790428 31673536 7148792 21.70 226096 5644008 1589276 4.68 1235228 5232320 206372 Average: 27401745 31687820 5537475 16.81 154159 4265221 1524651 4.49 1059633 3952756 428299 14:21:01 IFACE rxpck/s txpck/s rxkB/s txkB/s rxcmp/s txcmp/s rxmcst/s %ifutil 14:22:01 docker0 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 14:22:01 lo 3.73 3.73 0.45 0.45 0.00 0.00 0.00 0.00 14:22:01 ens3 494.60 265.87 6285.62 26.21 0.00 0.00 0.00 0.00 14:23:01 docker0 22.55 27.65 2.16 352.93 0.00 0.00 0.00 0.00 14:23:01 lo 1.27 1.27 0.18 0.18 0.00 0.00 0.00 0.00 14:23:01 ens3 517.68 303.47 6566.66 22.43 0.00 0.00 0.00 0.00 14:24:01 docker0 86.45 151.78 5.61 2186.44 0.00 0.00 0.00 0.00 14:24:01 veth45e1cbf 28.34 68.04 2.02 1317.49 0.00 0.00 0.00 0.11 14:24:01 lo 0.73 0.73 0.11 0.11 0.00 0.00 0.00 0.00 14:24:01 ens3 310.56 197.75 4800.01 17.42 0.00 0.00 0.00 0.00 Average: docker0 36.34 59.81 2.59 846.53 0.00 0.00 0.00 0.00 Average: veth45e1cbf 9.45 22.68 0.67 439.21 0.00 0.00 0.00 0.04 Average: lo 1.91 1.91 0.25 0.25 0.00 0.00 0.00 0.00 Average: ens3 440.94 255.69 5884.04 22.02 0.00 0.00 0.00 0.00 ---> sar -P ALL: Linux 4.15.0-192-generic (prd-ubuntu1804-docker-8c-8g-6483) 02/09/26 _x86_64_ (8 CPU) 14:20:21 LINUX RESTART (8 CPU) 14:21:01 CPU %user %nice %system %iowait %steal %idle 14:22:01 all 12.23 0.00 2.54 1.59 0.05 83.59 14:22:01 0 5.61 0.00 2.51 0.03 0.03 91.81 14:22:01 1 39.17 0.00 4.47 0.85 0.08 55.43 14:22:01 2 5.32 0.00 2.05 6.35 0.05 86.22 14:22:01 3 17.78 0.00 2.23 0.20 0.05 79.74 14:22:01 4 17.09 0.00 2.61 0.23 0.07 80.00 14:22:01 5 4.63 0.00 2.22 4.49 0.07 88.59 14:22:01 6 4.06 0.00 2.62 0.30 0.05 92.97 14:22:01 7 4.05 0.00 1.60 0.25 0.03 94.06 14:23:01 all 23.13 0.00 4.97 1.24 0.08 70.58 14:23:01 0 22.21 0.00 4.74 0.03 0.08 72.94 14:23:01 1 23.05 0.00 6.70 4.79 0.08 65.37 14:23:01 2 26.23 0.00 6.29 0.54 0.08 66.85 14:23:01 3 21.95 0.00 5.62 3.60 0.08 68.74 14:23:01 4 20.93 0.00 3.68 0.32 0.08 74.99 14:23:01 5 21.59 0.00 4.28 0.05 0.07 74.00 14:23:01 6 23.78 0.00 4.42 0.15 0.07 71.58 14:23:01 7 25.26 0.00 4.07 0.44 0.10 70.13 14:24:01 all 27.31 0.00 5.58 0.95 0.08 66.09 14:24:01 0 26.30 0.00 5.37 0.14 0.07 68.12 14:24:01 1 27.79 0.00 6.51 4.60 0.10 61.00 14:24:01 2 29.14 0.00 5.16 0.79 0.08 64.82 14:24:01 3 25.74 0.00 4.70 1.30 0.07 68.20 14:24:01 4 27.11 0.00 6.15 0.05 0.07 66.62 14:24:01 5 28.22 0.00 4.97 0.02 0.07 66.73 14:24:01 6 27.53 0.00 5.36 0.42 0.08 66.62 14:24:01 7 26.64 0.00 6.44 0.27 0.05 66.59 Average: all 20.88 0.00 4.36 1.26 0.07 73.43 Average: 0 18.01 0.00 4.20 0.07 0.06 77.66 Average: 1 30.03 0.00 5.89 3.41 0.09 60.58 Average: 2 20.23 0.00 4.50 2.56 0.07 72.64 Average: 3 21.81 0.00 4.18 1.70 0.07 72.24 Average: 4 21.69 0.00 4.14 0.20 0.07 73.89 Average: 5 18.15 0.00 3.82 1.52 0.07 76.44 Average: 6 18.47 0.00 4.13 0.29 0.07 77.04 Average: 7 18.64 0.00 4.04 0.32 0.06 76.95