b=2.40-r23 nss-hesiod=2.40-r23 openssf-compiler-options=20240627-r14 pkgconf=2.4.3-r1 posix-cc-wrappers=1-r5 readline=8.2.13-r1 sqlite-libs=3.49.1-r1 wolfi-baselayout=20230201-r19 zlib=1.3.1-r6]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: []
installing ca-certificates-bundle (20241121-r2)
installing wolfi-baselayout (20230201-r19)
installing ld-linux (2.40-r23)
installing glibc-locale-posix (2.40-r23)
installing libgcc (14.2.0-r11)
installing glibc (2.40-r23)
installing ncurses-terminfo-base (6.5_p20241228-r1)
installing ncurses (6.5_p20241228-r1)
installing bash (5.2.37-r30)
installing libstdc++ (14.2.0-r11)
installing libzstd1 (1.5.7-r1)
installing binutils-gold (2.44-r1)
installing binutils (2.44-r1)
installing libquadmath (14.2.0-r11)
installing libstdc++-dev (14.2.0-r11)
installing openssf-compiler-options (20240627-r14)
installing posix-cc-wrappers (1-r5)
installing libatomic (14.2.0-r11)
installing gmp (6.3.0-r4)
installing libgo (14.2.0-r11)
installing libgomp (14.2.0-r11)
installing isl (0.27-r0)
installing mpfr (4.2.2-r0)
installing mpc (1.3.1-r5)
installing zlib (1.3.1-r6)
installing gcc (14.2.0-r11)
installing libxcrypt (4.4.38-r1)
installing libxcrypt-dev (4.4.38-r1)
installing linux-headers (6.13.7-r0)
installing nss-db (2.40-r23)
installing nss-hesiod (2.40-r23)
installing glibc-dev (2.40-r23)
installing make (4.4.1-r4)
installing pkgconf (2.4.3-r1)
installing build-base (1-r8)
installing libcrypt1 (2.40-r23)
installing busybox (1.37.0-r30)
installing readline (8.2.13-r1)
installing sqlite-libs (3.49.1-r1)
installing heimdal-libs (7.8.0-r9)
installing libcrypto3 (3.4.1-r2)
installing gdbm (1.24-r3)
installing cyrus-sasl (2.1.28-r7)
installing libbrotlicommon1 (1.1.0-r4)
installing libbrotlidec1 (1.1.0-r4)
installing krb5-conf (1.0-r5)
installing libcom_err (1.47.2-r21)
installing keyutils-libs (1.6.3-r31)
installing libssl3 (3.4.1-r2)
installing libverto (0.3.2-r4)
installing krb5-libs (1.21.3-r2)
installing libevent (2.1.12-r6)
installing libldap (2.6.9-r0)
installing libnghttp2-14 (1.65.0-r0)
installing libunistring (1.3-r1)
installing libidn2 (2.3.8-r0)
installing libpsl (0.21.5-r4)
installing libcurl-openssl4 (8.12.1-r0)
installing libexpat1 (2.7.0-r0)
installing libpcre2-8-0 (10.45-r1)
installing git (2.49.0-r0)
installing go-1.24 (1.24.1-r1)
installing gobump (0.9.0-r2)
built image layer tarball as /tmp/apko-temp-1777587483/apko-x86_64.tar.gz
running step "git-checkout"
[git checkout] repo='https://github.com/bank-vaults/vault-secrets-webhook' dest='.' depth='1' branch='' tag='v1.21.4' expcommit='be52ffa2ad14b492036e814fb922b690c4a6d8e6' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.h5p75D
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v1.21.4 --depth=1 https://github.com/bank-vaults/vault-secrets-webhook /tmp/tmp.h5p75D
warning: refs/tags/v1.21.4 242ecf245878301160d4f6ec73ec51928d0d45e5 is not a commit!
[git checkout] execute: cd /tmp/tmp.h5p75D
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v1.21.4:refs/origin/tags/v1.21.4
[git checkout] execute: git checkout --quiet origin/tags/v1.21.4
[git checkout] tag v1.21.4 is be52ffa2ad14b492036e814fb922b690c4a6d8e6
running step "go/bump"
2025/03/20 22:50:57 Local Go version: 1.24.1
2025/03/20 22:50:57 Running go mod tidy with go version '1.24.1' ...
2025/03/20 22:51:05 Update package: github.com/go-jose/go-jose/v4
2025/03/20 22:51:05 Running go mod edit -droprequire ...
2025/03/20 22:51:05 Running go get ...
2025/03/20 22:51:05 Update package: golang.org/x/crypto
2025/03/20 22:51:05 Running go mod edit -droprequire ...
2025/03/20 22:51:05 Running go get ...
2025/03/20 22:51:06 Update package: golang.org/x/net
2025/03/20 22:51:06 Running go mod edit -droprequire ...
2025/03/20 22:51:06 Running go get ...
2025/03/20 22:51:06 Update package: golang.org/x/oauth2
2025/03/20 22:51:06 Running go mod edit -droprequire ...
2025/03/20 22:51:06 Running go get ...
2025/03/20 22:51:06 Running go mod tidy with go version '1.24.1' ...
running step "go/build"
retrieving workspace from builder: 
retrieved and wrote post-build workspace to: /tmp/melange-workspace-1269198607
running package linters for vault-secrets-webhook
linting apk: vault-secrets-webhook
writing SBOM for vault-secrets-webhook
generating package vault-secrets-webhook-1.21.4-r0
scanning for shared object dependencies...
scanning for commands...
  found command usr/bin/webhook
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
  provides:
    cmd:webhook=1.21.4-r0
  installed-size: 105041142
  data.tar.gz digest: 8cf59e7d258e21c7cd5e45a03ddee9f8f9721ce80cf1d19c989cd1041c7a63d1
wrote packages/x86_64/vault-secrets-webhook-1.21.4-r0.apk
cleaning Workspace by removing 32 file/directories in /home/build
generating apk index from packages in packages/x86_64
processing package packages/x86_64/vault-secrets-webhook-1.21.4-r0.apk
updating index at packages/x86_64/APKINDEX.tar.gz with new packages: [vault-secrets-webhook-1.21.4-r0]
building test workspace in: '/tmp/melange-guest-2279770536-main' with apko
Error: rpc error: code = NotFound desc = federate identity: rpc error: code = NotFound desc = no identity found for (https://accounts.google.com, 109346087047205543085)
Error running `chainctl auth token`: exit status 1
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    keyring:      []
    packages:     [curl kwok kwokctl vault jq git wait-for-it vault-secrets-webhook busybox kwok kwokctl kubernetes etcd]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing ca-certificates-bundle (20241121-r2)
installing wolfi-baselayout (20230201-r19)
installing ld-linux (2.40-r23)
installing libgcc (14.2.0-r11)
installing glibc-locale-posix (2.40-r23)
installing glibc (2.40-r23)
installing libxcrypt (4.4.38-r1)
installing libcrypt1 (2.40-r23)
installing busybox (1.37.0-r30)
installing libunistring (1.3-r1)
installing libidn2 (2.3.8-r0)
installing libpsl (0.21.5-r4)
installing libbrotlicommon1 (1.1.0-r4)
installing libbrotlidec1 (1.1.0-r4)
installing libverto (0.3.2-r4)
installing krb5-conf (1.0-r5)
installing libcom_err (1.47.2-r21)
installing keyutils-libs (1.6.3-r31)
installing libcrypto3 (3.4.1-r2)
installing libssl3 (3.4.1-r2)
installing krb5-libs (1.21.3-r2)
installing libevent (2.1.12-r6)
installing ncurses-terminfo-base (6.5_p20241228-r1)
installing ncurses (6.5_p20241228-r1)
installing readline (8.2.13-r1)
installing sqlite-libs (3.49.1-r1)
installing heimdal-libs (7.8.0-r9)
installing gdbm (1.24-r3)
installing cyrus-sasl (2.1.28-r7)
installing libldap (2.6.9-r0)
installing zlib (1.3.1-r6)
installing libnghttp2-14 (1.65.0-r0)
installing libcurl-openssl4 (8.12.1-r0)
installing curl (8.12.1-r0)
installing etcd-3.5 (3.5.19-r0)
installing libexpat1 (2.7.0-r0)
installing libpcre2-8-0 (10.45-r1)
installing git (2.49.0-r0)
installing oniguruma (6.9.10-r1)
installing jq (1.7.1-r4)
installing kubernetes-1.32 (1.32.3-r2)
installing kwok (0.6.1-r7)
installing kwokctl (0.6.1-r7)
installing vault-1.14 (1.14.12-r0)
installing vault-secrets-webhook (1.21.4-r0)
installing bash (5.2.37-r30)
installing libattr1 (2.5.2-r6)
installing libacl1 (2.3.2-r6)
installing coreutils (9.6-r30)
installing wait-for-it (0.20200823-r5)
installing wolfi-keys (1-r10)
installing apk-tools (2.14.10-r2)
installing wolfi-base (1-r7)
built image layer tarball as /tmp/apko-temp-4145303176/apko-x86_64.tar.gz
OCI layer digest: sha256:be0439312402b9b1355abce9f3fca0c5eb7a95c6f6dc4b5aba245f308bccbfc1
OCI layer diffID: sha256:da24685f2fb8ff401225b9352b823e0e7bee25ac1cfb3806be2b9088d11cd1f9
saving OCI image locally: apko.local/cache:2dc70ef4fd6951600abe4d2723a657c1d1a8b2f376abe6bacbbcc7fa81f23130
populating workspace /tmp/melange-workspace-422453761 from vault-secrets-webhook
running the main test pipeline
running step "test/kwok/cluster"
{"time":"2025-03-20T22:52:32.00456102Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":297},"msg":"Cluster is creating","cluster":"kwok"}
{"time":"2025-03-20T22:52:32.614368018Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":304},"msg":"Cluster is created","cluster":"kwok","elapsed":{"nanosecond":609821898,"human":"609.821898ms"}}
{"time":"2025-03-20T22:52:32.619665865Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":337},"msg":"Cluster is starting","cluster":"kwok"}
2025-03-20T22:52:39.137Z [INFO]  core: enabled credential backend: path=approle/ type=approle version=""
Success! Enabled approle auth method at: approle/
2025-03-20T22:52:39.196Z [INFO]  core: successful mount: namespace="" path=kvv2/ type=kv version=""
Success! Enabled the kv-v2 secrets engine at: kvv2/
Success! Uploaded policy: webapp
Success! Data written to: auth/approle/role/role1
===== Secret Path =====
kvv2/data/webapp/config

======= Metadata =======
Key                Value
---                -----
created_time       2025-03-20T22:52:39.375992687Z
custom_metadata    <nil>
deletion_time      n/a
destroyed          false
version            1
running step "Run the vault-secrets-webhook"
time=2025-03-20T22:52:41.490Z level=INFO msg="Listening on http://:8443" app=vault-secrets-webhook
wait-for-it: waiting 15 seconds for localhost:8443
wait-for-it: localhost:8443 is available after 0 seconds

1-r2)
installing libssl3 (3.4.1-r2)
installing krb5-libs (1.21.3-r2)
installing libevent (2.1.12-r6)
installing ncurses-terminfo-base (6.5_p20241228-r1)
installing ncurses (6.5_p20241228-r1)
installing readline (8.2.13-r1)
installing sqlite-libs (3.49.1-r1)
installing heimdal-libs (7.8.0-r9)
installing gdbm (1.24-r3)
installing cyrus-sasl (2.1.28-r7)
installing libldap (2.6.9-r0)
installing zlib (1.3.1-r6)
installing libnghttp2-14 (1.65.0-r0)
installing libcurl-openssl4 (8.12.1-r0)
installing curl (8.12.1-r0)
installing etcd-3.5 (3.5.19-r0)
installing libpcre2-8-0 (10.45-r1)
installing libexpat1 (2.7.0-r0)
installing git (2.49.0-r0)
installing oniguruma (6.9.10-r1)
installing jq (1.7.1-r4)
installing kubernetes-1.32 (1.32.3-r2)
installing kwok (0.6.1-r7)
installing kwokctl (0.6.1-r7)
installing vault-1.14 (1.14.12-r0)
installing vault-secrets-webhook (1.21.4-r0)
installing bash (5.2.37-r30)
installing libattr1 (2.5.2-r6)
installing libacl1 (2.3.2-r6)
installing coreutils (9.6-r30)
installing wait-for-it (0.20200823-r5)
installing wolfi-keys (1-r10)
installing apk-tools (2.14.10-r2)
installing wolfi-base (1-r7)
built image layer tarball as /tmp/apko-temp-1666867254/apko-aarch64.tar.gz
OCI layer digest: sha256:6f7c57ee7a7a16f75505ffd9229eee4137217add9c8ac45a69aecb0d68373d22
OCI layer diffID: sha256:5cff8d87e616651c488cc937a4b6cb2b5de6cc377dfcdeea436837a747d4b958
saving OCI image locally: apko.local/cache:378c211200d945135eb2e7d6e173e6456c3e6e0bb4ba68ff753d36689ede3696
populating workspace /tmp/melange-workspace-2373625392 from vault-secrets-webhook
running the main test pipeline
running step "test/kwok/cluster"
{"time":"2025-03-20T22:52:25.306329006Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":297},"msg":"Cluster is creating","cluster":"kwok"}
{"time":"2025-03-20T22:52:27.173566359Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":304},"msg":"Cluster is created","cluster":"kwok","elapsed":{"nanosecond":1867244593,"human":"1.867244593s"}}
{"time":"2025-03-20T22:52:27.175505159Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":337},"msg":"Cluster is starting","cluster":"kwok"}
{"time":"2025-03-20T22:52:29.08604721Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":342},"msg":"Cluster is started","cluster":"kwok","elapsed":{"nanosecond":1910536171,"human":"1.910536171s"}}
{"time":"2025-03-20T22:52:29.105712978Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/scale.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/scale/scale.go","line":111},"msg":"No resource found, use default resource","cluster":"kwok","resource":"node"}
{"time":"2025-03-20T22:52:29.22825271Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/snapshot.(*Loader).finishLoad","file":"sigs.k8s.io/kwok/pkg/kwokctl/snapshot/load.go","line":187},"msg":"Load resources","cluster":"kwok","name":"node","replicas":1,"resource":"nodes","counter":1,"elapsed":{"nanosecond":106477085,"human":"106.477085ms"}}
Attempt 1: /healthz not ready, retrying...
Attempt 2: /healthz not ready, retrying...
/healthz is ready
/readyz is ready
/openapi/v2 is ready
node/node-000000 condition met
Kubernetes control plane is running at https://127.0.0.1:32764

To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
running step "Install, configure, and add a secret to vault"
Cloning into 'vault-secrets-webhook'...
==> Vault server configuration:

Administrative Namespace: 
             Api Address: http://127.0.0.1:8200
                     Cgo: disabled
         Cluster Address: https://127.0.0.1:8201
   Environment Variables: GODEBUG, HOME, HOSTNAME, OLDPWD, PATH, PWD, SHLVL, SSL_CERT_FILE, VAULT_ADDR, VAULT_API_ADDR, VAULT_TOKEN
              Go Version: go1.22.2
              Listener 1: tcp (addr: "0.0.0.0:8200", cluster address: "0.0.0.0:8201", max_request_duration: "1m30s", max_request_size: "33554432", tls: "disabled")
               Log Level: 
                   Mlock: supported: true, enabled: false
           Recovery Mode: false
                 Storage: inmem
                 Version: Vault v1.14.12, built 2024-04-27T00:25:06Z
             Version Sha: c93b26fd708f1af00e3862df942aff8296d47bf6

2025-03-20T22:52:32.978Z [INFO]  proxy environment: http_proxy="" https_proxy="" no_proxy=""
2025-03-20T22:52:32.980Z [INFO]  core: Initializing version history cache for core
2025-03-20T22:52:32.986Z [INFO]  core: security barrier not initialized
2025-03-20T22:52:32.986Z [INFO]  core: security barrier initialized: stored=1 shares=1 threshold=1
2025-03-20T22:52:32.986Z [INFO]  core: post-unseal setup starting
2025-03-20T22:52:32.998Z [INFO]  core: loaded wrapping token key
2025-03-20T22:52:32.998Z [INFO]  core: successfully setup plugin catalog: plugin-directory=""
2025-03-20T22:52:32.998Z [INFO]  core: no mounts; adding default mount table
2025-03-20T22:52:33.000Z [INFO]  core: successfully mounted: type=cubbyhole version="v1.14.12+builtin.vault" path=cubbyhole/ namespace="ID: root. Path: "
2025-03-20T22:52:33.002Z [INFO]  core: successfully mounted: type=system version="v1.14.12+builtin.vault" path=sys/ namespace="ID: root. Path: "
2025-03-20T22:52:33.003Z [INFO]  core: successfully mounted: type=identity version="v1.14.12+builtin.vault" path=identity/ namespace="ID: root. Path: "
2025-03-20T22:52:33.005Z [INFO]  core: successfully mounted: type=token version="v1.14.12+builtin.vault" path=token/ namespace="ID: root. Path: "
2025-03-20T22:52:33.005Z [INFO]  rollback: Starting the rollback manager with 256 workers
2025-03-20T22:52:33.005Z [INFO]  rollback: starting rollback manager
2025-03-20T22:52:33.006Z [INFO]  core: restoring leases
2025-03-20T22:52:33.007Z [INFO]  identity: entities restored
2025-03-20T22:52:33.007Z [INFO]  identity: groups restored
2025-03-20T22:52:33.007Z [INFO]  expiration: lease restore complete
2025-03-20T22:52:33.007Z [INFO]  core: Recorded vault version: vault version=1.14.12 upgrade time="2025-03-20 22:52:33.007268394 +0000 UTC" build date=2024-04-27T00:25:06Z
2025-03-20T22:52:33.008Z [INFO]  core: post-unseal setup complete
2025-03-20T22:52:33.009Z [INFO]  core: root token generated
2025-03-20T22:52:33.009Z [INFO]  core: pre-seal teardown starting
2025-03-20T22:52:33.009Z [INFO]  rollback: stopping rollback manager
2025-03-20T22:52:33.009Z [INFO]  core: pre-seal teardown complete
2025-03-20T22:52:33.009Z [INFO]  core.cluster-listener.tcp: starting listener: listener_address=0.0.0.0:8201
2025-03-20T22:52:33.009Z [INFO]  core.cluster-listener: serving cluster requests: cluster_listen_address=[::]:8201
2025-03-20T22:52:33.009Z [INFO]  core: post-unseal setup starting
2025-03-20T22:52:33.009Z [INFO]  core: loaded wrapping token key
2025-03-20T22:52:33.009Z [INFO]  core: successfully setup plugin catalog: plugin-directory=""
2025-03-20T22:52:33.010Z [INFO]  core: successfully mounted: type=system version="v1.14.12+builtin.vault" path=sys/ namespace="ID: root. Path: "
2025-03-20T22:52:33.011Z [INFO]  core: successfully mounted: type=identity version="v1.14.12+builtin.vault" path=identity/ namespace="ID: root. Path: "
2025-03-20T22:52:33.011Z [INFO]  core: successfully mounted: type=cubbyhole version="v1.14.12+builtin.vault" path=cubbyhole/ namespace="ID: root. Path: "
2025-03-20T22:52:33.012Z [INFO]  core: successfully mounted: type=token version="v1.14.12+builtin.vault" path=token/ namespace="ID: root. Path: "
2025-03-20T22:52:33.012Z [INFO]  rollback: Starting the rollback manager with 256 workers
2025-03-20T22:52:33.012Z [INFO]  rollback: starting rollback manager
2025-03-20T22:52:33.012Z [INFO]  core: restoring leases
2025-03-20T22:52:33.013Z [INFO]  identity: entities restored
2025-03-20T22:52:33.013Z [INFO]  identity: groups restored
2025-03-20T22:52:33.013Z [INFO]  expiration: lease restore complete
2025-03-20T22:52:33.013Z [INFO]  core: post-unseal setup complete
2025-03-20T22:52:33.013Z [INFO]  core: vault is unsealed
2025-03-20T22:52:33.014Z [INFO]  expiration: revoked lease: lease_id=auth/token/root/h1aba52d3e5e1bbcf7463ef0f1afa5dd20966fa1ed84a49c99872d8c74a761bf6
2025-03-20T22:52:33.018Z [INFO]  core: successful mount: namespace="" path=secret/ type=kv version=""
==> Vault server started! Log data will stream in below:

WARNING! dev mode is enabled! In this mode, Vault runs entirely in-memory
and starts unsealed with a single unseal key. The root token is already
authenticated to the CLI, so you can immediately begin using Vault.

You may need to set the following environment variables:

    $ export VAULT_ADDR='http://0.0.0.0:8200'

The unseal key and root token are displayed below in case you want to
seal/unseal the Vault or re-authenticate.

Unseal Key: xiauz65Pz03FaxSLX4TrY2OOgYE9St3PPqfQoYDXdTg=
Root Token: root

Development mode should NOT be used in production installations!

2025-03-20T22:52:35.791Z [INFO]  core: enabled credential backend: path=approle/ type=approle version=""
Success! Enabled approle auth method at: approle/
2025-03-20T22:52:35.848Z [INFO]  core: successful mount: namespace="" path=kvv2/ type=kv version=""
Success! Enabled the kv-v2 secrets engine at: kvv2/
Success! Uploaded policy: webapp
Success! Data written to: auth/approle/role/role1
===== Secret Path =====
kvv2/data/webapp/config

======= Metadata =======
Key                Value
---                -----
created_time       2025-03-20T22:52:36.03919196Z
custom_metadata    <nil>
deletion_time      n/a
destroyed          false
version            1
running step "Run the vault-secrets-webhook"
wait-for-it: waiting 15 seconds for localhost:8443
time=2025-03-20T22:52:38.209Z level=INFO msg="Listening on http://:8443" app=vault-secrets-webhook
wait-for-it: localhost:8443 is available after 1 seconds
running step "Fake AdmissionReview and check response for secret from vault"