Triggered by Gerrit: https://gerrit.onap.org/r/c/integration/xtesting/+/141743 Running as SYSTEM [EnvInject] - Loading node environment variables. Building remotely on prd-ubuntu1804-docker-8c-8g-41348 (ubuntu1804-docker-8c-8g) in workspace /w/workspace/integration-xtesting-security-docker-verify-master [ssh-agent] Looking for ssh-agent implementation... [ssh-agent] Exec ssh-agent (binary ssh-agent on a remote machine) $ ssh-agent SSH_AUTH_SOCK=/tmp/ssh-EiMN8FTZLl3M/agent.2160 SSH_AGENT_PID=2162 [ssh-agent] Started. Running ssh-add (command line suppressed) Identity added: /w/workspace/integration-xtesting-security-docker-verify-master@tmp/private_key_4695117103057371884.key (/w/workspace/integration-xtesting-security-docker-verify-master@tmp/private_key_4695117103057371884.key) [ssh-agent] Using credentials onap-jobbuiler (Gerrit user) The recommended git tool is: NONE using credential onap-jenkins-ssh Wiping out workspace first. Cloning the remote Git repository Cloning repository git://cloud.onap.org/mirror/integration/xtesting > git init /w/workspace/integration-xtesting-security-docker-verify-master # timeout=10 Fetching upstream changes from git://cloud.onap.org/mirror/integration/xtesting > git --version # timeout=10 > git --version # 'git version 2.17.1' using GIT_SSH to set credentials Gerrit user Verifying host key using manually-configured host key entries > git fetch --tags --progress -- git://cloud.onap.org/mirror/integration/xtesting +refs/heads/*:refs/remotes/origin/* # timeout=10 > git config remote.origin.url git://cloud.onap.org/mirror/integration/xtesting # timeout=10 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10 > git config remote.origin.url git://cloud.onap.org/mirror/integration/xtesting # timeout=10 Fetching upstream changes from git://cloud.onap.org/mirror/integration/xtesting using GIT_SSH to set credentials Gerrit user Verifying host key using manually-configured host key entries > git fetch --tags --progress -- git://cloud.onap.org/mirror/integration/xtesting refs/changes/43/141743/2 # timeout=10 > git rev-parse ef9f545ca74662a9e9c3ca21cafe73c524f12c54^{commit} # timeout=10 JENKINS-19022: warning: possible memory leak due to Git plugin usage; see: https://plugins.jenkins.io/git/#remove-git-plugin-buildsbybranch-builddata-script Checking out Revision ef9f545ca74662a9e9c3ca21cafe73c524f12c54 (refs/changes/43/141743/2) > git config core.sparsecheckout # timeout=10 > git checkout -f ef9f545ca74662a9e9c3ca21cafe73c524f12c54 # timeout=10 Commit message: "Chore: Add dependabot config" > git rev-parse FETCH_HEAD^{commit} # timeout=10 > git rev-list --no-walk 7191df8920bdeb2de9e315af71dcff04c04237fc # timeout=10 provisioning config files... copy managed file [npmrc] to file:/home/jenkins/.npmrc copy managed file [pipconf] to file:/home/jenkins/.config/pip/pip.conf [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins13558166840465584602.sh ---> python-tools-install.sh Setup pyenv: * system (set by /opt/pyenv/version) * 3.8.13 (set by /opt/pyenv/version) * 3.9.13 (set by /opt/pyenv/version) * 3.10.6 (set by /opt/pyenv/version) lf-activate-venv(): INFO: Creating python3 venv at /tmp/venv-x2fv lf-activate-venv(): INFO: Save venv in file: /tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: lftools lf-activate-venv(): INFO: Adding /tmp/venv-x2fv/bin to PATH Generating Requirements File Python 3.10.6 pip 25.2 from /tmp/venv-x2fv/lib/python3.10/site-packages/pip (python 3.10) appdirs==1.4.4 argcomplete==3.6.2 aspy.yaml==1.3.0 attrs==25.3.0 autopage==0.5.2 beautifulsoup4==4.13.5 boto3==1.40.18 botocore==1.40.18 bs4==0.0.2 cachetools==5.5.2 certifi==2025.8.3 cffi==1.17.1 cfgv==3.4.0 chardet==5.2.0 charset-normalizer==3.4.3 click==8.2.1 cliff==4.11.0 cmd2==2.7.0 cryptography==3.3.2 debtcollector==3.0.0 decorator==5.2.1 defusedxml==0.7.1 Deprecated==1.2.18 distlib==0.4.0 dnspython==2.7.0 docker==7.1.0 dogpile.cache==1.4.0 durationpy==0.10 email-validator==2.3.0 filelock==3.19.1 future==1.0.0 gitdb==4.0.12 GitPython==3.1.45 google-auth==2.40.3 httplib2==0.22.0 identify==2.6.13 idna==3.10 importlib-resources==1.5.0 iso8601==2.1.0 Jinja2==3.1.6 jmespath==1.0.1 jsonpatch==1.33 jsonpointer==3.0.0 jsonschema==4.25.1 jsonschema-specifications==2025.4.1 keystoneauth1==5.12.0 kubernetes==33.1.0 lftools==0.37.13 lxml==6.0.1 markdown-it-py==4.0.0 MarkupSafe==3.0.2 mdurl==0.1.2 msgpack==1.1.1 multi_key_dict==2.0.3 munch==4.0.0 netaddr==1.3.0 niet==1.4.2 nodeenv==1.9.1 oauth2client==4.1.3 oauthlib==3.3.1 openstacksdk==4.7.0 os-client-config==2.3.0 os-service-types==1.8.0 osc-lib==4.2.0 oslo.config==10.0.0 oslo.context==6.1.0 oslo.i18n==6.6.0 oslo.log==7.2.1 oslo.serialization==5.8.0 oslo.utils==9.1.0 packaging==25.0 pbr==7.0.1 platformdirs==4.4.0 prettytable==3.16.0 psutil==7.0.0 pyasn1==0.6.1 pyasn1_modules==0.4.2 pycparser==2.22 pygerrit2==2.0.15 PyGithub==2.7.0 Pygments==2.19.2 PyJWT==2.10.1 PyNaCl==1.5.0 pyparsing==2.4.7 pyperclip==1.9.0 pyrsistent==0.20.0 python-cinderclient==9.7.0 python-dateutil==2.9.0.post0 python-heatclient==4.3.0 python-jenkins==1.8.3 python-keystoneclient==5.6.0 python-magnumclient==4.8.1 python-openstackclient==8.2.0 python-swiftclient==4.8.0 PyYAML==6.0.2 referencing==0.36.2 requests==2.32.5 requests-oauthlib==2.0.0 requestsexceptions==1.4.0 rfc3986==2.0.0 rich==14.1.0 rich-argparse==1.7.1 rpds-py==0.27.0 rsa==4.9.1 ruamel.yaml==0.18.15 ruamel.yaml.clib==0.2.12 s3transfer==0.13.1 simplejson==3.20.1 six==1.17.0 smmap==5.0.2 soupsieve==2.7 stevedore==5.5.0 tabulate==0.9.0 toml==0.10.2 tomlkit==0.13.3 tqdm==4.67.1 typing_extensions==4.15.0 tzdata==2025.2 urllib3==1.26.20 virtualenv==20.34.0 wcwidth==0.2.13 websocket-client==1.8.0 wrapt==1.17.3 xdg==6.0.0 xmltodict==0.14.2 yq==3.4.3 provisioning config files... copy managed file [global-settings] to file:/w/workspace/integration-xtesting-security-docker-verify-master@tmp/config1935004349019827315tmp copy managed file [integration-settings] to file:/w/workspace/integration-xtesting-security-docker-verify-master@tmp/config7855865025117097435tmp [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins386745678723888258.sh ---> docker-login.sh nexus3.onap.org:10001 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded nexus3.onap.org:10002 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded nexus3.onap.org:10003 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded nexus3.onap.org:10004 WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded docker.io WARNING! Using --password via the CLI is insecure. Use --password-stdin. WARNING! Your password will be stored unencrypted in /home/jenkins/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded ---> docker-login.sh ends [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins14536572819850244979.sh [integration-xtesting-security-docker-verify-master] $ /bin/sh -xe /tmp/jenkins12825566277331424423.sh [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content DOCKER_ROOT=./security CONTAINER_TAG_YAML_DIR= CONTAINER_TAG_METHOD=stream [EnvInject] - Variables injected successfully. [integration-xtesting-security-docker-verify-master] $ /bin/bash -l /tmp/jenkins10938720799800492230.sh ---> docker-get-container-tag.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/integration-xtesting-security-docker-verify-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-x2fv from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: yq lf-activate-venv(): INFO: Adding /tmp/venv-x2fv/bin to PATH ---> Docker image tag found: master [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties file path 'env_docker_inject.txt' [EnvInject] - Variables injected successfully. [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content DOCKER_ARGS=-f ./docker/Dockerfile DOCKER_ROOT=./security CONTAINER_PULL_REGISTRY=nexus3.onap.org:10001 CONTAINER_PUSH_REGISTRY=nexus3.onap.org:10003 DOCKER_NAME=onap/xtesting-security [EnvInject] - Variables injected successfully. [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins12989428090698010119.sh ---> docker-build.sh Docker version 20.10.18, build b40c2f6 Building image: nexus3.onap.org:10003/onap/xtesting-security:master docker build -f ./docker/Dockerfile -t nexus3.onap.org:10003/onap/xtesting-security:master . Sending build context to Docker daemon 40.45kB Step 1/26 : FROM golang:1.24 AS build_yq 1.24: Pulling from library/golang 80b7316254b3: Pulling fs layer 36e4db86de6e: Pulling fs layer 8ea45766c644: Pulling fs layer 5a975c959e0f: Pulling fs layer 9a940d118df6: Pulling fs layer b88fc9540cc5: Pulling fs layer 4f4fb700ef54: Pulling fs layer 9a940d118df6: Waiting 5a975c959e0f: Waiting 4f4fb700ef54: Waiting b88fc9540cc5: Waiting 80b7316254b3: Verifying Checksum 80b7316254b3: Download complete 8ea45766c644: Verifying Checksum 8ea45766c644: Download complete 36e4db86de6e: Verifying Checksum 36e4db86de6e: Download complete b88fc9540cc5: Verifying Checksum b88fc9540cc5: Download complete 4f4fb700ef54: Verifying Checksum 4f4fb700ef54: Download complete 80b7316254b3: Pull complete 9a940d118df6: Verifying Checksum 36e4db86de6e: Pull complete 8ea45766c644: Pull complete 5a975c959e0f: Verifying Checksum 5a975c959e0f: Download complete 5a975c959e0f: Pull complete 9a940d118df6: Pull complete b88fc9540cc5: Pull complete 4f4fb700ef54: Pull complete Digest: sha256:8d9e57c5a6f2bede16fe674c16149eee20db6907129e02c4ad91ce5a697a4012 Status: Downloaded newer image for golang:1.24 ---> cf1007acc9e7 Step 2/26 : WORKDIR /go/src/github.com/mikefarah/ ---> Running in 20f38215202d Removing intermediate container 20f38215202d ---> f71188298ba0 Step 3/26 : RUN git clone https://github.com/mikefarah/yq.git --depth 1 ---> Running in 618788775a3d Cloning into 'yq'... Removing intermediate container 618788775a3d ---> a7801cd0191e Step 4/26 : WORKDIR /go/src/github.com/mikefarah/yq ---> Running in c42bd294561b Removing intermediate container c42bd294561b ---> 896ac3bc1b4d Step 5/26 : RUN go mod tidy ---> Running in 25d5e21f8234 go: downloading github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e go: downloading github.com/spf13/cobra v1.9.1 go: downloading github.com/spf13/pflag v1.0.7 go: downloading gopkg.in/op/go-logging.v1 v1.0.0-20160211212156-b2cb9fa56473 go: downloading github.com/a8m/envsubst v1.4.3 go: downloading github.com/alecthomas/participle/v2 v2.1.4 go: downloading github.com/dimchansky/utfbom v1.1.1 go: downloading github.com/elliotchance/orderedmap v1.8.0 go: downloading github.com/fatih/color v1.18.0 go: downloading github.com/go-ini/ini v1.67.0 go: downloading github.com/goccy/go-json v0.10.5 go: downloading github.com/goccy/go-yaml v1.18.0 go: downloading github.com/jinzhu/copier v0.4.0 go: downloading github.com/magiconair/properties v1.8.10 go: downloading github.com/pelletier/go-toml/v2 v2.2.4 go: downloading github.com/yuin/gopher-lua v1.1.1 go: downloading go.yaml.in/yaml/v3 v3.0.4 go: downloading golang.org/x/net v0.42.0 go: downloading golang.org/x/text v0.27.0 go: downloading github.com/alecthomas/repr v0.5.1 go: downloading github.com/inconshreveable/mousetrap v1.1.0 go: downloading github.com/alecthomas/assert/v2 v2.11.0 go: downloading github.com/stretchr/testify v1.7.0 go: downloading gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 go: downloading github.com/mattn/go-colorable v0.1.14 go: downloading github.com/mattn/go-isatty v0.0.20 go: downloading golang.org/x/sys v0.34.0 go: downloading github.com/hexops/gotextdiff v1.0.3 go: downloading github.com/davecgh/go-spew v1.1.0 go: downloading github.com/pmezard/go-difflib v1.0.0 go: downloading gopkg.in/yaml.v3 v3.0.1 Removing intermediate container 25d5e21f8234 ---> 39488463d5e7 Step 6/26 : RUN CGO_ENABLED=0 go install -a -ldflags '-w -s -extldflags "-static"' ---> Running in 2d75f2750c28 Removing intermediate container 2d75f2750c28 ---> 9b2c4b4dc722 Step 7/26 : FROM golang:1.19 AS build_onap 1.19: Pulling from library/golang 012c0b3e998c: Pulling fs layer 00046d1e755e: Pulling fs layer 9f13f5a53d11: Pulling fs layer 190fa1651026: Pulling fs layer 0808c6468790: Pulling fs layer 5ec11cb68eac: Pulling fs layer 190fa1651026: Waiting 0808c6468790: Waiting 5ec11cb68eac: Waiting 00046d1e755e: Verifying Checksum 00046d1e755e: Download complete 012c0b3e998c: Verifying Checksum 012c0b3e998c: Download complete 9f13f5a53d11: Verifying Checksum 9f13f5a53d11: Download complete 5ec11cb68eac: Verifying Checksum 5ec11cb68eac: Download complete 012c0b3e998c: Pull complete 00046d1e755e: Pull complete 190fa1651026: Verifying Checksum 190fa1651026: Download complete 9f13f5a53d11: Pull complete 0808c6468790: Verifying Checksum 0808c6468790: Download complete 190fa1651026: Pull complete 0808c6468790: Pull complete 5ec11cb68eac: Pull complete Digest: sha256:3025bf670b8363ec9f1b4c4f27348e6d9b7fec607c47e401e40df816853e743a Status: Downloaded newer image for golang:1.19 ---> 80b76a6c918c Step 8/26 : WORKDIR /opt/onap ---> Running in e65d3bc947b0 Removing intermediate container e65d3bc947b0 ---> 6eff7e06d4ba Step 9/26 : RUN git clone https://git.onap.org/integration --depth 1 ---> Running in 3ca5fabb4350 Cloning into 'integration'... Removing intermediate container 3ca5fabb4350 ---> c7fad7c9f192 Step 10/26 : WORKDIR /opt/onap/integration/test/security/sslendpoints ---> Running in 3d4d3d9418c8 Removing intermediate container 3d4d3d9418c8 ---> 886816c38364 Step 11/26 : RUN go mod tidy ---> Running in 32141f93d3ff go: downloading k8s.io/apimachinery v0.17.3 go: downloading k8s.io/api v0.17.3 go: downloading github.com/onsi/ginkgo v1.10.1 go: downloading github.com/onsi/gomega v1.7.0 go: downloading github.com/Ullaakut/nmap v2.0.0+incompatible go: downloading k8s.io/client-go v0.0.0-20190819141724-e14f31a72a77 go: downloading gopkg.in/yaml.v2 v2.2.8 go: downloading golang.org/x/net v0.0.0-20191004110552-13f9640d40b9 go: downloading github.com/hpcloud/tail v1.0.0 go: downloading golang.org/x/sys v0.0.0-20190826190057-c7b8b68b1456 go: downloading gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 go: downloading gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 go: downloading gopkg.in/fsnotify.v1 v1.4.7 go: downloading github.com/stretchr/testify v1.4.0 go: downloading github.com/golang/protobuf v1.3.2 go: downloading github.com/kr/pretty v0.1.0 go: downloading github.com/fsnotify/fsnotify v1.4.7 go: downloading github.com/gogo/protobuf v1.2.2-0.20190723190241-65acae22fc9d go: downloading github.com/google/gofuzz v1.0.0 go: downloading sigs.k8s.io/yaml v1.1.0 go: downloading github.com/kr/text v0.1.0 go: downloading github.com/davecgh/go-spew v1.1.1 go: downloading github.com/pmezard/go-difflib v1.0.0 go: downloading golang.org/x/text v0.3.2 go: downloading gopkg.in/inf.v0 v0.9.1 go: downloading github.com/spf13/pflag v1.0.5 go: downloading k8s.io/klog v1.0.0 go: downloading github.com/json-iterator/go v1.1.8 go: downloading github.com/modern-go/reflect2 v1.0.1 go: downloading github.com/google/go-cmp v0.3.0 go: downloading github.com/imdario/mergo v0.3.8 go: downloading golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2 go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd go: downloading github.com/googleapis/gnostic v0.0.0-20170729233727-0c5108395e2d go: downloading golang.org/x/time v0.0.0-20191024005414-555d28b269f0 go: downloading k8s.io/utils v0.0.0-20200124190032-861946025e34 go: downloading golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d go: downloading google.golang.org/appengine v1.5.0 Removing intermediate container 32141f93d3ff ---> 0453e446934f Step 12/26 : RUN CGO_ENABLED=0 go install -a -ldflags '-w -s -extldflags "-static"' ---> Running in ae7ef7460be0 Removing intermediate container ae7ef7460be0 ---> ca2d3d196657 Step 13/26 : FROM opnfv/xtesting:wallaby AS run wallaby: Pulling from opnfv/xtesting 72cfd02ff4d0: Pulling fs layer 2dd6b71b7b2e: Pulling fs layer 5ff4388fefac: Pulling fs layer 5ff4388fefac: Download complete 72cfd02ff4d0: Verifying Checksum 72cfd02ff4d0: Download complete 72cfd02ff4d0: Pull complete 2dd6b71b7b2e: Verifying Checksum 2dd6b71b7b2e: Download complete 2dd6b71b7b2e: Pull complete 5ff4388fefac: Pull complete Digest: sha256:5b1c7d739602557beff53093f25aaa6414da2f6048a31b6973c4e2a121383e64 Status: Downloaded newer image for opnfv/xtesting:wallaby ---> 5443c299b496 Step 14/26 : ARG KUBERNETES_VERSION="v1.23.8" ---> Running in 82a587bfeae3 Removing intermediate container 82a587bfeae3 ---> 5a0765e7b44c Step 15/26 : ARG ONAP_TAG=master ---> Running in cb380eb763b4 Removing intermediate container cb380eb763b4 ---> 5357fc1ec8ab Step 16/26 : ARG ONAP_TESTS_TAG=master ---> Running in 83878331e380 Removing intermediate container 83878331e380 ---> 57ea1e419c28 Step 17/26 : ADD https://storage.googleapis.com/kubernetes-release/release/${KUBERNETES_VERSION}/bin/linux/amd64/kubectl /usr/local/bin/kubectl ---> 870f1997ae66 Step 18/26 : COPY scripts/check_security_root.sh /check_security_root.sh ---> 2cbef0080792 Step 19/26 : COPY scripts/check_unlimitted_pods.sh /check_unlimitted_pods.sh ---> a5e47ec26488 Step 20/26 : COPY scripts/check_cis_kubernetes.sh /check_cis_kubernetes.sh ---> 63eb491cf6d2 Step 21/26 : COPY scripts/check_versions.sh /check_versions.sh ---> 50c3eaf0cddb Step 22/26 : COPY --from=build_yq /go/bin/yq /usr/local/bin/yq ---> 4ce12eb5637d Step 23/26 : COPY --from=build_onap /go/bin/sslendpoints /usr/local/bin/sslendpoints ---> 073f332bc751 Step 24/26 : RUN set -x && apk --no-cache add --update curl ca-certificates openssl procps util-linux nmap nmap-scripts jq && apk --no-cache add --virtual .build-deps --update python3-dev linux-headers gcc musl-dev && chmod +x /usr/local/bin/kubectl && git clone --depth 1 https://github.com/aquasecurity/kube-hunter.git /kube-hunter && mkdir /check_versions && adduser kubectl -Du 2342 -h /config && wget -O /check_for_nonssl_endpoints.sh https://git.onap.org/integration/plain/test/security/check_for_nonssl_endpoints.sh?h=$ONAP_TAG && wget -O /check_for_jdwp.sh https://git.onap.org/integration/plain/test/security/check_for_jdwp.sh?h=$ONAP_TAG && wget -O /jdwp_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/jdwp_ports/jdwp_xfail.txt?h=$ONAP_TAG && wget -O /nonssl_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/nonssl_endpoints/nonssl_xfail.txt?h=$ONAP_TAG && wget -O /root_pods_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/root_pods/root_pods_xfail.txt?h=$ONAP_TAG && wget -O /unlimitted_pods_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/unlimitted_pods/unlimitted_pods_xfail.txt?h=$ONAP_TAG && wget -O /check_versions/k8s_bin_versions_inspector.py https://git.onap.org/integration/plain/test/security/check_versions/versions/k8s_bin_versions_inspector.py?h=$ONAP_TAG && wget -O /check_versions/requirements.txt https://git.onap.org/integration/plain/test/security/check_versions/requirements.txt?h=$ONAP_TAG && wget -O /check_versions/recommended_versions.yaml https://git.onap.org/integration/seccom/plain/recommended_versions.yaml?h=$ONAP_TAG && chmod +x /usr/local/bin/sslendpoints && chmod +x /check_*.sh && rm -rf /usr/lib/python3.8/site-packages/PyYAML* && pip3 install --no-cache-dir git+https://git.onap.org/integration/xtesting.git@$ONAP_TESTS_TAG#subdirectory=security && cd /kube-hunter && pip3 install -r /kube-hunter/requirements.txt && pip3 install --no-cache-dir git+https://git.onap.org/integration.git@$ONAP_TESTS_TAG#subdirectory=test/security/check_versions && apk del .build-deps ---> Running in 3ec2df4a9c74 + apk --no-cache add --update curl ca-certificates openssl procps util-linux nmap nmap-scripts jq fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/main/x86_64/APKINDEX.tar.gz fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/community/x86_64/APKINDEX.tar.gz (1/33) Installing curl (7.79.1-r3) (2/33) Installing oniguruma (6.9.6-r0) (3/33) Installing jq (1.6-r1) (4/33) Installing libgcc (10.2.1_pre1-r3) (5/33) Installing lua5.3-libs (5.3.6-r0) (6/33) Installing libpcap (1.10.0-r0) (7/33) Installing pcre (8.44-r0) (8/33) Installing libssh2 (1.9.0-r1) (9/33) Installing libstdc++ (10.2.1_pre1-r3) (10/33) Installing nmap (7.91-r0) (11/33) Installing nmap-nselibs (7.91-r0) (12/33) Installing nmap-scripts (7.91-r0) (13/33) Installing openssl (1.1.1s-r0) (14/33) Installing libintl (0.20.2-r2) (15/33) Installing libproc (3.3.16-r0) (16/33) Installing procps (3.3.16-r0) (17/33) Installing libblkid (2.37.4-r0) (18/33) Installing blkid (2.37.4-r0) (19/33) Installing libcap-ng (0.8.2-r0) (20/33) Installing setpriv (2.37.4-r0) (21/33) Installing libmount (2.37.4-r0) (22/33) Installing libsmartcols (2.37.4-r0) (23/33) Installing findmnt (2.37.4-r0) (24/33) Installing mcookie (2.37.4-r0) (25/33) Installing hexdump (2.37.4-r0) (26/33) Installing lsblk (2.37.4-r0) (27/33) Installing libuuid (2.37.4-r0) (28/33) Installing libfdisk (2.37.4-r0) (29/33) Installing sfdisk (2.37.4-r0) (30/33) Installing cfdisk (2.37.4-r0) (31/33) Installing partx (2.37.4-r0) (32/33) Installing libeconf (0.3.8-r0) (33/33) Installing util-linux (2.37.4-r0) Executing busybox-1.32.1-r9.trigger OK: 517 MiB in 109 packages + apk --no-cache add --virtual .build-deps --update python3-dev linux-headers gcc musl-dev fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/main/x86_64/APKINDEX.tar.gz fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/community/x86_64/APKINDEX.tar.gz (1/14) Installing pkgconf (1.7.3-r0) (2/14) Installing python3-dev (3.8.15-r0) (3/14) Installing linux-headers (5.7.8-r0) (4/14) Installing binutils (2.35.2-r1) (5/14) Installing libgomp (10.2.1_pre1-r3) (6/14) Installing libatomic (10.2.1_pre1-r3) (7/14) Installing libgphobos (10.2.1_pre1-r3) (8/14) Installing gmp (6.2.1-r1) (9/14) Installing isl22 (0.22-r0) (10/14) Installing mpfr4 (4.1.0-r0) (11/14) Installing mpc1 (1.2.0-r0) (12/14) Installing gcc (10.2.1_pre1-r3) (13/14) Installing musl-dev (1.2.2-r2) (14/14) Installing .build-deps (20250827.005822) Executing busybox-1.32.1-r9.trigger OK: 682 MiB in 123 packages + chmod +x /usr/local/bin/kubectl + git clone --depth 1 https://github.com/aquasecurity/kube-hunter.git /kube-hunter Cloning into '/kube-hunter'... + mkdir /check_versions + adduser kubectl -Du 2342 -h /config + wget -O /check_for_nonssl_endpoints.sh 'https://git.onap.org/integration/plain/test/security/check_for_nonssl_endpoints.sh?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/check_for_nonssl_endpoints.sh' check_for_nonssl_end 100% |********************************| 3990 0:00:00 ETA '/check_for_nonssl_endpoints.sh' saved + wget -O /check_for_jdwp.sh 'https://git.onap.org/integration/plain/test/security/check_for_jdwp.sh?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/check_for_jdwp.sh' check_for_jdwp.sh 100% |********************************| 4162 0:00:00 ETA '/check_for_jdwp.sh' saved + wget -O /jdwp_xfail.txt 'https://git.onap.org/integration/seccom/plain/waivers/jdwp_ports/jdwp_xfail.txt?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/jdwp_xfail.txt' jdwp_xfail.txt 100% |********************************| 273 0:00:00 ETA '/jdwp_xfail.txt' saved + wget -O /nonssl_xfail.txt 'https://git.onap.org/integration/seccom/plain/waivers/nonssl_endpoints/nonssl_xfail.txt?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/nonssl_xfail.txt' nonssl_xfail.txt 100% |********************************| 752 0:00:00 ETA '/nonssl_xfail.txt' saved + wget -O /root_pods_xfail.txt 'https://git.onap.org/integration/seccom/plain/waivers/root_pods/root_pods_xfail.txt?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/root_pods_xfail.txt' root_pods_xfail.txt 100% |********************************| 632 0:00:00 ETA '/root_pods_xfail.txt' saved + wget -O /unlimitted_pods_xfail.txt 'https://git.onap.org/integration/seccom/plain/waivers/unlimitted_pods/unlimitted_pods_xfail.txt?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/unlimitted_pods_xfail.txt' unlimitted_pods_xfai 100% |********************************| 389 0:00:00 ETA '/unlimitted_pods_xfail.txt' saved + wget -O /check_versions/k8s_bin_versions_inspector.py 'https://git.onap.org/integration/plain/test/security/check_versions/versions/k8s_bin_versions_inspector.py?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/check_versions/k8s_bin_versions_inspector.py' k8s_bin_versions_ins 100% |********************************| 21168 0:00:00 ETA '/check_versions/k8s_bin_versions_inspector.py' saved + wget -O /check_versions/requirements.txt 'https://git.onap.org/integration/plain/test/security/check_versions/requirements.txt?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/check_versions/requirements.txt' requirements.txt 100% |********************************| 60 0:00:00 ETA '/check_versions/requirements.txt' saved + wget -O /check_versions/recommended_versions.yaml 'https://git.onap.org/integration/seccom/plain/recommended_versions.yaml?h=master' Connecting to git.onap.org (199.204.45.130:443) saving to '/check_versions/recommended_versions.yaml' recommended_versions 100% |********************************| 1963 0:00:00 ETA '/check_versions/recommended_versions.yaml' saved + chmod +x /usr/local/bin/sslendpoints + chmod +x /check_cis_kubernetes.sh /check_for_jdwp.sh /check_for_nonssl_endpoints.sh /check_security_root.sh /check_unlimitted_pods.sh /check_versions.sh + rm -rf /usr/lib/python3.8/site-packages/PyYAML-5.3.1-py3.8.egg-info + pip3 install --no-cache-dir 'git+https://git.onap.org/integration/xtesting.git@master#subdirectory=security' Collecting git+https://git.onap.org/integration/xtesting.git@master#subdirectory=security Cloning https://git.onap.org/integration/xtesting.git (to revision master) to /tmp/pip-req-build-jczdq5kq  Running command git clone -q https://git.onap.org/integration/xtesting.git /tmp/pip-req-build-jczdq5kq Collecting coverage!=4.4 Downloading coverage-7.6.1.tar.gz (798 kB) Installing build dependencies: started Installing build dependencies: finished with status 'done' Getting requirements to build wheel: started Getting requirements to build wheel: finished with status 'done' Preparing wheel metadata: started Preparing wheel metadata: finished with status 'done' Collecting nose Downloading nose-1.3.7-py3-none-any.whl (154 kB) Requirement already satisfied: xtesting in /usr/lib/python3.8/site-packages (from onap-security==1.0.0.dev150) (0.56.1.dev154) Collecting Kubernetes Downloading kubernetes-33.1.0-py2.py3-none-any.whl (1.9 MB) Requirement already satisfied: colorama in /usr/lib/python3.8/site-packages (from onap-security==1.0.0.dev150) (0.4.4) Collecting requests-oauthlib Downloading requests_oauthlib-2.0.0-py2.py3-none-any.whl (24 kB) Collecting websocket-client!=0.40.0,!=0.41.*,!=0.42.*,>=0.32.0 Downloading websocket_client-1.8.0-py3-none-any.whl (58 kB) Requirement already satisfied: python-dateutil>=2.5.3 in /usr/lib/python3.8/site-packages (from Kubernetes->onap-security==1.0.0.dev150) (2.8.1) Requirement already satisfied: urllib3>=1.24.2 in /usr/lib/python3.8/site-packages (from Kubernetes->onap-security==1.0.0.dev150) (1.26.3) Collecting durationpy>=0.7 Downloading durationpy-0.10-py3-none-any.whl (3.9 kB) Collecting oauthlib>=3.2.2 Downloading oauthlib-3.3.1-py3-none-any.whl (160 kB) Requirement already satisfied: requests in /usr/lib/python3.8/site-packages (from Kubernetes->onap-security==1.0.0.dev150) (2.25.1) Collecting pyyaml>=5.4.1 Downloading pyyaml-6.0.2.tar.gz (130 kB) Installing build dependencies: started Installing build dependencies: finished with status 'done' Getting requirements to build wheel: started Getting requirements to build wheel: finished with status 'done' Preparing wheel metadata: started Preparing wheel metadata: finished with status 'done' Collecting certifi>=14.05.14 Downloading certifi-2025.8.3-py3-none-any.whl (161 kB) Collecting google-auth>=1.0.1 Downloading google_auth-2.40.3-py2.py3-none-any.whl (216 kB) Requirement already satisfied: six>=1.9.0 in /usr/lib/python3.8/site-packages (from Kubernetes->onap-security==1.0.0.dev150) (1.15.0) Collecting cachetools<6.0,>=2.0.0 Downloading cachetools-5.5.2-py3-none-any.whl (10 kB) Collecting pyasn1-modules>=0.2.1 Downloading pyasn1_modules-0.4.2-py3-none-any.whl (181 kB) Collecting rsa<5,>=3.1.4 Downloading rsa-4.9.1-py3-none-any.whl (34 kB) Collecting pyasn1<0.7.0,>=0.6.1 Downloading pyasn1-0.6.1-py3-none-any.whl (83 kB) Requirement already satisfied: chardet<5,>=3.0.2 in /usr/lib/python3.8/site-packages (from requests->Kubernetes->onap-security==1.0.0.dev150) (4.0.0) Requirement already satisfied: idna<3.2,>=2.5 in /usr/lib/python3.8/site-packages (from requests->Kubernetes->onap-security==1.0.0.dev150) (2.10) Requirement already satisfied: os-testr in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (2.0.0) Requirement already satisfied: PrettyTable in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (0.7.2) Requirement already satisfied: stevedore!=3.0.0 in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (3.3.3) Requirement already satisfied: behave>=1.2.6 in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (1.2.6) Requirement already satisfied: mock!=4.0.0,!=4.0.1 in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (4.0.3) Requirement already satisfied: behave-html-formatter>=0.9.4 in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (0.9.4) Requirement already satisfied: pbr!=2.1.0 in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (5.5.1) Requirement already satisfied: robotframework>=3.0 in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (3.1.1) Requirement already satisfied: boto3 in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (1.17.26) Requirement already satisfied: ansible-runner!=1.3.5 in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (1.4.7) Requirement already satisfied: python-subunit in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (1.4.0) Requirement already satisfied: lxml!=3.7.0 in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (4.6.2) Requirement already satisfied: junitxml in /usr/lib/python3.8/site-packages (from xtesting->onap-security==1.0.0.dev150) (0.7) Requirement already satisfied: psutil in /usr/lib/python3.8/site-packages (from ansible-runner!=1.3.5->xtesting->onap-security==1.0.0.dev150) (5.8.0) Requirement already satisfied: pexpect>=4.5 in /usr/lib/python3.8/site-packages (from ansible-runner!=1.3.5->xtesting->onap-security==1.0.0.dev150) (4.8.0) Requirement already satisfied: python-daemon in /usr/lib/python3.8/site-packages (from ansible-runner!=1.3.5->xtesting->onap-security==1.0.0.dev150) (2.3.0) Requirement already satisfied: parse>=1.8.2 in /usr/lib/python3.8/site-packages (from behave>=1.2.6->xtesting->onap-security==1.0.0.dev150) (1.20.0) Requirement already satisfied: parse-type>=0.4.2 in /usr/lib/python3.8/site-packages (from behave>=1.2.6->xtesting->onap-security==1.0.0.dev150) (0.6.2) Requirement already satisfied: ptyprocess>=0.5 in /usr/lib/python3.8/site-packages (from pexpect>=4.5->ansible-runner!=1.3.5->xtesting->onap-security==1.0.0.dev150) (0.7.0) Requirement already satisfied: jmespath<1.0.0,>=0.7.1 in /usr/lib/python3.8/site-packages (from boto3->xtesting->onap-security==1.0.0.dev150) (0.10.0) Requirement already satisfied: s3transfer<0.4.0,>=0.3.0 in /usr/lib/python3.8/site-packages (from boto3->xtesting->onap-security==1.0.0.dev150) (0.3.4) Requirement already satisfied: botocore<1.21.0,>=1.20.26 in /usr/lib/python3.8/site-packages (from boto3->xtesting->onap-security==1.0.0.dev150) (1.20.26) Requirement already satisfied: testtools>=2.2.0 in /usr/lib/python3.8/site-packages (from os-testr->xtesting->onap-security==1.0.0.dev150) (2.4.0) Requirement already satisfied: stestr>=1.0.0 in /usr/lib/python3.8/site-packages (from os-testr->xtesting->onap-security==1.0.0.dev150) (3.1.0) Requirement already satisfied: extras in /usr/lib/python3.8/site-packages (from python-subunit->xtesting->onap-security==1.0.0.dev150) (1.0.0) Requirement already satisfied: future in /usr/lib/python3.8/site-packages (from stestr>=1.0.0->os-testr->xtesting->onap-security==1.0.0.dev150) (0.18.2) Requirement already satisfied: voluptuous>=0.8.9 in /usr/lib/python3.8/site-packages (from stestr>=1.0.0->os-testr->xtesting->onap-security==1.0.0.dev150) (0.12.1) Requirement already satisfied: cliff>=2.8.0 in /usr/lib/python3.8/site-packages (from stestr>=1.0.0->os-testr->xtesting->onap-security==1.0.0.dev150) (3.7.0) Requirement already satisfied: fixtures>=3.0.0 in /usr/lib/python3.8/site-packages (from stestr>=1.0.0->os-testr->xtesting->onap-security==1.0.0.dev150) (3.0.0) Requirement already satisfied: cmd2>=1.0.0 in /usr/lib/python3.8/site-packages (from cliff>=2.8.0->stestr>=1.0.0->os-testr->xtesting->onap-security==1.0.0.dev150) (1.5.0) Requirement already satisfied: pyparsing>=2.1.0 in /usr/lib/python3.8/site-packages (from cliff>=2.8.0->stestr>=1.0.0->os-testr->xtesting->onap-security==1.0.0.dev150) (2.4.7) Requirement already satisfied: wcwidth>=0.1.7 in /usr/lib/python3.8/site-packages (from cmd2>=1.0.0->cliff>=2.8.0->stestr>=1.0.0->os-testr->xtesting->onap-security==1.0.0.dev150) (0.2.5) Requirement already satisfied: pyperclip>=1.6 in /usr/lib/python3.8/site-packages (from cmd2>=1.0.0->cliff>=2.8.0->stestr>=1.0.0->os-testr->xtesting->onap-security==1.0.0.dev150) (1.8.2) Requirement already satisfied: attrs>=16.3.0 in /usr/lib/python3.8/site-packages (from cmd2>=1.0.0->cliff>=2.8.0->stestr>=1.0.0->os-testr->xtesting->onap-security==1.0.0.dev150) (20.3.0) Requirement already satisfied: python-mimeparse in /usr/lib/python3.8/site-packages (from testtools>=2.2.0->os-testr->xtesting->onap-security==1.0.0.dev150) (1.6.0) Requirement already satisfied: traceback2 in /usr/lib/python3.8/site-packages (from testtools>=2.2.0->os-testr->xtesting->onap-security==1.0.0.dev150) (1.4.0) Requirement already satisfied: unittest2>=1.0.0 in /usr/lib/python3.8/site-packages (from testtools>=2.2.0->os-testr->xtesting->onap-security==1.0.0.dev150) (1.1.0) Collecting argparse Downloading argparse-1.4.0-py2.py3-none-any.whl (23 kB) Requirement already satisfied: setuptools in /usr/lib/python3.8/site-packages (from python-daemon->ansible-runner!=1.3.5->xtesting->onap-security==1.0.0.dev150) (54.1.1) Requirement already satisfied: docutils in /usr/lib/python3.8/site-packages (from python-daemon->ansible-runner!=1.3.5->xtesting->onap-security==1.0.0.dev150) (0.16) Requirement already satisfied: lockfile>=0.10 in /usr/lib/python3.8/site-packages (from python-daemon->ansible-runner!=1.3.5->xtesting->onap-security==1.0.0.dev150) (0.12.2) Requirement already satisfied: linecache2 in /usr/lib/python3.8/site-packages (from traceback2->testtools>=2.2.0->os-testr->xtesting->onap-security==1.0.0.dev150) (1.0.0) Building wheels for collected packages: onap-security, coverage, pyyaml Building wheel for onap-security (setup.py): started Building wheel for onap-security (setup.py): finished with status 'done' Created wheel for onap-security: filename=onap_security-1.0.0.dev150-py3-none-any.whl size=5355 sha256=f206f80bb333d1232c5cf5d5c639edc7618ea4686250bc3bc893f792662d953c Stored in directory: /tmp/pip-ephem-wheel-cache-2a42f9w3/wheels/0a/4b/d6/00a7dd4fc2b7106377787b2b1ffde366c1413133ecb6923aed Building wheel for coverage (PEP 517): started Building wheel for coverage (PEP 517): finished with status 'done' Created wheel for coverage: filename=coverage-7.6.1-cp38-cp38-linux_x86_64.whl size=234686 sha256=2fd792e3ad7d6b2834ad354fe3c3dc593badfd7d5362dee999450e981982850f Stored in directory: /tmp/pip-ephem-wheel-cache-2a42f9w3/wheels/e1/49/21/b85d651d9be3faaba93a6a9e7a8802c97a9f999adfd52ebc68 Building wheel for pyyaml (PEP 517): started Building wheel for pyyaml (PEP 517): finished with status 'done' Created wheel for pyyaml: filename=pyyaml-6.0.2-cp38-cp38-linux_x86_64.whl size=45359 sha256=54220c687aebdf87ae47fd23012ddb6f34820cffd03e22fabea0f04853b5ed22 Stored in directory: /tmp/pip-ephem-wheel-cache-2a42f9w3/wheels/ab/34/2b/5ad179dc5914ad34b84b05b4fd1c3f7a39fee3e771ddf534a4 Successfully built onap-security coverage pyyaml Installing collected packages: argparse, pyyaml, pyasn1, rsa, pyasn1-modules, oauthlib, cachetools, websocket-client, requests-oauthlib, google-auth, durationpy, certifi, nose, Kubernetes, coverage, onap-security Attempting uninstall: pyasn1 Found existing installation: pyasn1 0.4.8 Uninstalling pyasn1-0.4.8: Successfully uninstalled pyasn1-0.4.8 Successfully installed Kubernetes-33.1.0 argparse-1.4.0 cachetools-5.5.2 certifi-2025.8.3 coverage-7.6.1 durationpy-0.10 google-auth-2.40.3 nose-1.3.7 oauthlib-3.3.1 onap-security-1.0.0.dev150 pyasn1-0.6.1 pyasn1-modules-0.4.2 pyyaml-6.0.2 requests-oauthlib-2.0.0 rsa-4.9.1 websocket-client-1.8.0 + cd /kube-hunter + pip3 install -r /kube-hunter/requirements.txt Obtaining file:///kube-hunter (from -r /kube-hunter/requirements.txt (line 1)) Installing build dependencies: started Installing build dependencies: finished with status 'done' Getting requirements to build wheel: started Getting requirements to build wheel: finished with status 'done' Installing backend dependencies: started Installing backend dependencies: finished with status 'done' Preparing wheel metadata: started Preparing wheel metadata: finished with status 'error'  ERROR: Command errored out with exit status 1: command: /usr/bin/python3 /usr/lib/python3.8/site-packages/pip/_vendor/pep517/_in_process.py prepare_metadata_for_build_wheel /tmp/tmpw18sch91 cwd: /kube-hunter Complete output (51 lines): :2: DeprecationWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html toml section missing PosixPath('pyproject.toml') does not contain a tool.setuptools_scm section /tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/setuptools_scm/git.py:202: UserWarning: "/kube-hunter" is shallow and may cause errors warnings.warn(f'"{wd.path}" is shallow and may cause errors') Traceback (most recent call last): File "/usr/lib/python3.8/site-packages/pip/_vendor/pep517/_in_process.py", line 280, in main() File "/usr/lib/python3.8/site-packages/pip/_vendor/pep517/_in_process.py", line 263, in main json_out['return_val'] = hook(**hook_input['kwargs']) File "/usr/lib/python3.8/site-packages/pip/_vendor/pep517/_in_process.py", line 133, in prepare_metadata_for_build_wheel return hook(metadata_directory, config_settings) File "/tmp/pip-build-env-xtskw470/overlay/lib/python3.8/site-packages/setuptools/build_meta.py", line 376, in prepare_metadata_for_build_wheel self.run_setup() File "/tmp/pip-build-env-xtskw470/overlay/lib/python3.8/site-packages/setuptools/build_meta.py", line 521, in run_setup super().run_setup(setup_script=setup_script) File "/tmp/pip-build-env-xtskw470/overlay/lib/python3.8/site-packages/setuptools/build_meta.py", line 319, in run_setup exec(code, locals()) File "", line 60, in File "/tmp/pip-build-env-xtskw470/overlay/lib/python3.8/site-packages/setuptools/__init__.py", line 117, in setup return distutils.core.setup(**attrs) File "/tmp/pip-build-env-xtskw470/overlay/lib/python3.8/site-packages/setuptools/_distutils/core.py", line 145, in setup _setup_distribution = dist = klass(attrs) File "/tmp/pip-build-env-xtskw470/overlay/lib/python3.8/site-packages/setuptools/dist.py", line 326, in __init__ _Distribution.__init__(self, dist_attrs) File "/tmp/pip-build-env-xtskw470/overlay/lib/python3.8/site-packages/setuptools/_distutils/dist.py", line 279, in __init__ self.finalize_options() File "/tmp/pip-build-env-xtskw470/overlay/lib/python3.8/site-packages/setuptools/dist.py", line 682, in finalize_options ep(self) File "/tmp/pip-build-env-xtskw470/overlay/lib/python3.8/site-packages/setuptools/dist.py", line 702, in _finalize_setup_keywords ep.load()(self, ep.name, value) File "/tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/setuptools_scm/_integration/setuptools.py", line 122, in version_keyword result.apply(dist) File "/tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/setuptools_scm/_integration/version_inference.py", line 28, in apply version_string = infer_version_string( File "/tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/setuptools_scm/_integration/version_inference.py", line 98, in infer_version_string maybe_version = _get_version( File "/tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/setuptools_scm/_get_version_impl.py", line 105, in _get_version parsed_version = parse_version(config) File "/tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/setuptools_scm/_get_version_impl.py", line 63, in parse_version or parse_scm_version(config) File "/tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/setuptools_scm/_get_version_impl.py", line 41, in parse_scm_version return _entrypoints.version_from_entrypoint( File "/tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/setuptools_scm/_entrypoints.py", line 56, in version_from_entrypoint maybe_version: version.ScmVersion | None = fn(root, config=config) File "/tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/setuptools_scm/git.py", line 319, in parse return _git_parse_inner( File "/tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/setuptools_scm/git.py", line 365, in _git_parse_inner tag = config.version_cls(config.fallback_version or "0.0") File "/tmp/pip-build-env-xtskw470/normal/lib/python3.8/site-packages/packaging/version.py", line 202, in __init__ raise InvalidVersion(f"Invalid version: {version!r}") packaging.version.InvalidVersion: Invalid version: 'noversion' ---------------------------------------- WARNING: Discarding file:///kube-hunter. Command errored out with exit status 1: /usr/bin/python3 /usr/lib/python3.8/site-packages/pip/_vendor/pep517/_in_process.py prepare_metadata_for_build_wheel /tmp/tmpw18sch91 Check the logs for full command output. ERROR: Command errored out with exit status 1: /usr/bin/python3 /usr/lib/python3.8/site-packages/pip/_vendor/pep517/_in_process.py prepare_metadata_for_build_wheel /tmp/tmpw18sch91 Check the logs for full command output. The command '/bin/sh -c set -x && apk --no-cache add --update curl ca-certificates openssl procps util-linux nmap nmap-scripts jq && apk --no-cache add --virtual .build-deps --update python3-dev linux-headers gcc musl-dev && chmod +x /usr/local/bin/kubectl && git clone --depth 1 https://github.com/aquasecurity/kube-hunter.git /kube-hunter && mkdir /check_versions && adduser kubectl -Du 2342 -h /config && wget -O /check_for_nonssl_endpoints.sh https://git.onap.org/integration/plain/test/security/check_for_nonssl_endpoints.sh?h=$ONAP_TAG && wget -O /check_for_jdwp.sh https://git.onap.org/integration/plain/test/security/check_for_jdwp.sh?h=$ONAP_TAG && wget -O /jdwp_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/jdwp_ports/jdwp_xfail.txt?h=$ONAP_TAG && wget -O /nonssl_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/nonssl_endpoints/nonssl_xfail.txt?h=$ONAP_TAG && wget -O /root_pods_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/root_pods/root_pods_xfail.txt?h=$ONAP_TAG && wget -O /unlimitted_pods_xfail.txt https://git.onap.org/integration/seccom/plain/waivers/unlimitted_pods/unlimitted_pods_xfail.txt?h=$ONAP_TAG && wget -O /check_versions/k8s_bin_versions_inspector.py https://git.onap.org/integration/plain/test/security/check_versions/versions/k8s_bin_versions_inspector.py?h=$ONAP_TAG && wget -O /check_versions/requirements.txt https://git.onap.org/integration/plain/test/security/check_versions/requirements.txt?h=$ONAP_TAG && wget -O /check_versions/recommended_versions.yaml https://git.onap.org/integration/seccom/plain/recommended_versions.yaml?h=$ONAP_TAG && chmod +x /usr/local/bin/sslendpoints && chmod +x /check_*.sh && rm -rf /usr/lib/python3.8/site-packages/PyYAML* && pip3 install --no-cache-dir git+https://git.onap.org/integration/xtesting.git@$ONAP_TESTS_TAG#subdirectory=security && cd /kube-hunter && pip3 install -r /kube-hunter/requirements.txt && pip3 install --no-cache-dir git+https://git.onap.org/integration.git@$ONAP_TESTS_TAG#subdirectory=test/security/check_versions && apk del .build-deps' returned a non-zero code: 1 Build step 'Execute shell' marked build as failure $ ssh-agent -k unset SSH_AUTH_SOCK; unset SSH_AGENT_PID; echo Agent pid 2162 killed; [ssh-agent] Stopped. [PostBuildScript] - [INFO] Executing post build scripts. [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins4002550418621583338.sh ---> sysstat.sh [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins14189027906687958933.sh ---> package-listing.sh ++ facter osfamily ++ tr '[:upper:]' '[:lower:]' + OS_FAMILY=debian + workspace=/w/workspace/integration-xtesting-security-docker-verify-master + START_PACKAGES=/tmp/packages_start.txt + END_PACKAGES=/tmp/packages_end.txt + DIFF_PACKAGES=/tmp/packages_diff.txt + PACKAGES=/tmp/packages_start.txt + '[' /w/workspace/integration-xtesting-security-docker-verify-master ']' + PACKAGES=/tmp/packages_end.txt + case "${OS_FAMILY}" in + dpkg -l + grep '^ii' + '[' -f /tmp/packages_start.txt ']' + '[' -f /tmp/packages_end.txt ']' + diff /tmp/packages_start.txt /tmp/packages_end.txt + '[' /w/workspace/integration-xtesting-security-docker-verify-master ']' + mkdir -p /w/workspace/integration-xtesting-security-docker-verify-master/archives/ + cp -f /tmp/packages_diff.txt /tmp/packages_end.txt /tmp/packages_start.txt /w/workspace/integration-xtesting-security-docker-verify-master/archives/ [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins173623113584954590.sh ---> capture-instance-metadata.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/integration-xtesting-security-docker-verify-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-x2fv from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: lftools lf-activate-venv(): INFO: Adding /tmp/venv-x2fv/bin to PATH INFO: Running in OpenStack, capturing instance metadata [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins18051621677586123370.sh provisioning config files... copy managed file [jenkins-log-archives-settings] to file:/w/workspace/integration-xtesting-security-docker-verify-master@tmp/config1865352256530033775tmp Regular expression run condition: Expression=[^.*logs-s3.*], Label=[] Run condition [Regular expression match] preventing perform for step [Provide Configuration files] [EnvInject] - Injecting environment variables from a build step. [EnvInject] - Injecting as environment variables the properties content SERVER_ID=logs [EnvInject] - Variables injected successfully. [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins7348015273668192279.sh ---> create-netrc.sh [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins2546186088978886081.sh ---> python-tools-install.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/integration-xtesting-security-docker-verify-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-x2fv from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: lftools lf-activate-venv(): INFO: Adding /tmp/venv-x2fv/bin to PATH [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins15329117630972334577.sh ---> sudo-logs.sh Archiving 'sudo' log.. [integration-xtesting-security-docker-verify-master] $ /bin/bash /tmp/jenkins327651280475089244.sh ---> job-cost.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/integration-xtesting-security-docker-verify-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-x2fv from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: zipp==1.1.0 python-openstackclient urllib3~=1.26.15 lf-activate-venv(): INFO: Adding /tmp/venv-x2fv/bin to PATH INFO: No Stack... INFO: Retrieving Pricing Info for: v3-standard-8 INFO: Archiving Costs [integration-xtesting-security-docker-verify-master] $ /bin/bash -l /tmp/jenkins455494704786015632.sh ---> logs-deploy.sh Setup pyenv: system 3.8.13 3.9.13 * 3.10.6 (set by /w/workspace/integration-xtesting-security-docker-verify-master/.python-version) lf-activate-venv(): INFO: Reuse venv:/tmp/venv-x2fv from file:/tmp/.os_lf_venv lf-activate-venv(): INFO: Installing base packages (pip, setuptools, virtualenv) lf-activate-venv(): INFO: Attempting to install with network-safe options... lf-activate-venv(): INFO: Base packages installed successfully lf-activate-venv(): INFO: Installing additional packages: lftools lf-activate-venv(): INFO: Adding /tmp/venv-x2fv/bin to PATH INFO: Nexus URL https://nexus.onap.org path production/vex-yul-ecomp-jenkins-1/integration-xtesting-security-docker-verify-master/392 INFO: archiving workspace using pattern(s): Archives upload complete. INFO: archiving logs to Nexus ---> uname -a: Linux prd-ubuntu1804-docker-8c-8g-41348 4.15.0-192-generic #203-Ubuntu SMP Wed Aug 10 17:40:03 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux ---> lscpu: Architecture: x86_64 CPU op-mode(s): 32-bit, 64-bit Byte Order: Little Endian CPU(s): 8 On-line CPU(s) list: 0-7 Thread(s) per core: 1 Core(s) per socket: 1 Socket(s): 8 NUMA node(s): 1 Vendor ID: AuthenticAMD CPU family: 23 Model: 49 Model name: AMD EPYC-Rome Processor Stepping: 0 CPU MHz: 2799.998 BogoMIPS: 5599.99 Virtualization: AMD-V Hypervisor vendor: KVM Virtualization type: full L1d cache: 32K L1i cache: 32K L2 cache: 512K L3 cache: 16384K NUMA node0 CPU(s): 0-7 Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm rep_good nopl xtopology cpuid extd_apicid tsc_known_freq pni pclmulqdq ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm cmp_legacy svm cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw topoext perfctr_core ssbd ibrs ibpb stibp vmmcall fsgsbase tsc_adjust bmi1 avx2 smep bmi2 rdseed adx smap clflushopt clwb sha_ni xsaveopt xsavec xgetbv1 xsaves clzero xsaveerptr arat npt nrip_save umip rdpid arch_capabilities ---> nproc: 8 ---> df -h: Filesystem Size Used Avail Use% Mounted on udev 16G 0 16G 0% /dev tmpfs 3.2G 708K 3.2G 1% /run /dev/vda1 155G 14G 142G 9% / tmpfs 16G 0 16G 0% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 16G 0 16G 0% /sys/fs/cgroup /dev/vda15 105M 4.4M 100M 5% /boot/efi tmpfs 3.2G 0 3.2G 0% /run/user/1001 ---> free -m: total used free shared buff/cache available Mem: 32167 869 25061 0 6236 30843 Swap: 1023 0 1023 ---> ip addr: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: ens3: mtu 1458 qdisc mq state UP group default qlen 1000 link/ether fa:16:3e:65:07:73 brd ff:ff:ff:ff:ff:ff inet 10.30.107.47/23 brd 10.30.107.255 scope global dynamic ens3 valid_lft 85989sec preferred_lft 85989sec inet6 fe80::f816:3eff:fe65:773/64 scope link valid_lft forever preferred_lft forever 3: docker0: mtu 1500 qdisc noqueue state DOWN group default link/ether 02:42:3a:87:c2:03 brd ff:ff:ff:ff:ff:ff inet 10.250.0.254/24 brd 10.250.0.255 scope global docker0 valid_lft forever preferred_lft forever inet6 fe80::42:3aff:fe87:c203/64 scope link valid_lft forever preferred_lft forever ---> sar -b -r -n DEV: Linux 4.15.0-192-generic (prd-ubuntu1804-docker-8c-8g-41348) 08/27/25 _x86_64_ (8 CPU) 00:53:01 LINUX RESTART (8 CPU) 00:54:01 tps rtps wtps bread/s bwrtn/s 00:55:01 168.70 29.10 139.60 972.98 28157.92 00:56:01 205.15 9.07 196.08 1601.47 63610.86 00:57:01 127.21 0.05 127.16 11.33 69751.97 00:58:01 165.64 0.25 165.39 8.67 59829.90 00:59:01 210.33 0.07 210.26 8.00 59719.25 Average: 175.41 7.71 167.70 520.52 56212.11 00:54:01 kbmemfree kbavail kbmemused %memused kbbuffers kbcached kbcommit %commit kbactive kbinact kbdirty 00:55:01 30154976 31705048 2784244 8.45 67868 1793824 1434796 4.22 842956 1649720 161820 00:56:01 28820380 31649772 4118840 12.50 106736 2962460 1590644 4.68 989020 2709748 87660 00:57:01 27441180 31663200 5498040 16.69 136468 4242252 1519284 4.47 1054924 3938876 175504 00:58:01 26161924 31608764 6777296 20.58 213688 5256308 1708888 5.03 1243348 4886180 618952 00:59:01 25668712 31608160 7270508 22.07 227424 5685324 1634696 4.81 1339348 5228296 67564 Average: 27649434 31646989 5289786 16.06 150437 3988034 1577662 4.64 1093919 3682564 222300 00:54:01 IFACE rxpck/s txpck/s rxkB/s txkB/s rxcmp/s txcmp/s rxmcst/s %ifutil 00:55:01 lo 1.27 1.27 0.15 0.15 0.00 0.00 0.00 0.00 00:55:01 docker0 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 00:55:01 ens3 208.63 145.88 1261.57 45.01 0.00 0.00 0.00 0.00 00:56:01 lo 3.13 3.13 0.37 0.37 0.00 0.00 0.00 0.00 00:56:01 veth6ed4bc0 25.15 22.70 2.39 273.29 0.00 0.00 0.00 0.02 00:56:01 docker0 26.45 24.13 2.14 279.92 0.00 0.00 0.00 0.00 00:56:01 ens3 404.53 339.16 5747.82 28.52 0.00 0.00 0.00 0.00 00:57:01 lo 1.00 1.00 0.16 0.16 0.00 0.00 0.00 0.00 00:57:01 docker0 1.40 1.77 0.14 0.44 0.00 0.00 0.00 0.00 00:57:01 ens3 326.98 267.71 6202.75 18.46 0.00 0.00 0.00 0.00 00:58:01 lo 0.60 0.60 0.08 0.08 0.00 0.00 0.00 0.00 00:58:01 docker0 53.97 66.19 3.74 867.49 0.00 0.00 0.00 0.00 00:58:01 ens3 157.17 128.68 2714.72 10.46 0.00 0.00 0.00 0.00 00:59:01 lo 0.07 0.07 0.01 0.01 0.00 0.00 0.00 0.00 00:59:01 docker0 38.03 55.46 2.85 1467.43 0.00 0.00 0.00 0.00 00:59:01 veth7b0517e 38.03 55.61 3.37 1467.44 0.00 0.00 0.00 0.12 00:59:01 ens3 113.26 102.22 2233.24 10.32 0.00 0.00 0.00 0.00 Average: lo 1.21 1.21 0.15 0.15 0.00 0.00 0.00 0.00 Average: docker0 23.97 29.51 1.77 523.02 0.00 0.00 0.00 0.00 Average: veth7b0517e 7.60 11.12 0.67 293.47 0.00 0.00 0.00 0.02 Average: ens3 242.11 196.72 3631.87 22.56 0.00 0.00 0.00 0.00 ---> sar -P ALL: Linux 4.15.0-192-generic (prd-ubuntu1804-docker-8c-8g-41348) 08/27/25 _x86_64_ (8 CPU) 00:53:01 LINUX RESTART (8 CPU) 00:54:01 CPU %user %nice %system %iowait %steal %idle 00:55:01 all 9.09 0.00 0.73 4.36 0.03 85.78 00:55:01 0 4.04 0.00 0.37 0.07 0.02 95.51 00:55:01 1 26.72 0.00 1.50 3.20 0.05 68.53 00:55:01 2 4.61 0.00 0.43 21.12 0.02 73.82 00:55:01 3 15.60 0.00 1.07 2.52 0.03 80.78 00:55:01 4 6.63 0.00 1.07 5.43 0.03 86.83 00:55:01 5 5.98 0.00 0.70 0.37 0.03 92.92 00:55:01 6 8.38 0.00 0.43 0.58 0.02 90.58 00:55:01 7 0.72 0.00 0.27 1.61 0.05 97.36 00:56:01 all 7.78 0.00 2.27 6.77 0.05 83.13 00:56:01 0 5.46 0.00 2.23 3.89 0.03 88.38 00:56:01 1 5.82 0.00 2.14 0.03 0.05 91.96 00:56:01 2 17.70 0.00 2.56 9.27 0.08 70.39 00:56:01 3 9.89 0.00 2.23 1.45 0.07 86.36 00:56:01 4 6.74 0.00 3.31 21.56 0.07 68.32 00:56:01 5 5.27 0.00 1.78 0.49 0.03 92.44 00:56:01 6 6.77 0.00 2.05 0.79 0.05 90.34 00:56:01 7 4.55 0.00 1.86 16.78 0.07 76.74 00:57:01 all 18.19 0.00 3.57 5.69 0.07 72.47 00:57:01 0 17.33 0.00 2.92 3.29 0.07 76.39 00:57:01 1 20.12 0.00 4.33 0.10 0.05 75.40 00:57:01 2 18.28 0.00 3.43 3.97 0.05 74.26 00:57:01 3 17.37 0.00 3.16 6.09 0.08 73.30 00:57:01 4 17.75 0.00 4.01 23.42 0.10 54.73 00:57:01 5 17.36 0.00 3.53 3.99 0.05 75.07 00:57:01 6 18.91 0.00 3.55 0.07 0.07 77.40 00:57:01 7 18.38 0.00 3.65 4.70 0.08 73.18 00:58:01 all 22.44 0.00 4.33 5.46 0.09 67.69 00:58:01 0 20.24 0.00 3.70 8.56 0.07 67.43 00:58:01 1 24.02 0.00 4.86 0.32 0.07 70.74 00:58:01 2 22.15 0.00 4.20 6.60 0.19 66.86 00:58:01 3 22.11 0.00 4.20 13.18 0.07 60.45 00:58:01 4 23.28 0.00 3.95 7.78 0.07 64.94 00:58:01 5 21.66 0.00 5.51 0.44 0.07 72.33 00:58:01 6 22.23 0.00 3.92 0.03 0.07 73.75 00:58:01 7 23.81 0.00 4.31 6.79 0.10 64.99 00:59:01 all 7.83 0.00 1.31 5.34 0.03 85.48 00:59:01 0 10.98 0.00 1.35 2.29 0.03 85.34 00:59:01 1 7.33 0.00 1.34 2.04 0.02 89.27 00:59:01 2 13.74 0.00 1.51 0.92 0.03 83.80 00:59:01 3 0.75 0.00 0.53 22.18 0.03 76.50 00:59:01 4 9.05 0.00 2.46 12.57 0.03 75.88 00:59:01 5 2.29 0.00 0.58 0.00 0.02 97.11 00:59:01 6 2.34 0.00 0.78 0.91 0.05 95.93 00:59:01 7 16.29 0.00 1.96 1.89 0.05 79.82 Average: all 13.04 0.00 2.44 5.52 0.06 78.94 Average: 0 11.59 0.00 2.11 3.61 0.04 82.65 Average: 1 16.80 0.00 2.83 1.14 0.05 79.19 Average: 2 15.27 0.00 2.42 8.39 0.07 73.84 Average: 3 13.12 0.00 2.23 9.10 0.06 75.50 Average: 4 12.67 0.00 2.95 14.12 0.06 70.19 Average: 5 10.48 0.00 2.41 1.05 0.04 86.02 Average: 6 11.69 0.00 2.14 0.48 0.05 85.65 Average: 7 12.74 0.00 2.41 6.33 0.07 78.45