v5.0.58: retry on 401 from Gateway, bump test profile version

TEST_STAND/PG/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     nubes = {
       source  = "terra.k8c.ru/nubes-test/nubes"
-      version = "5.0.57"
+      version = "5.0.58"
     }
   }
 }

TEST_STAND/POSTGRES/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     nubes = {
       source  = "terra.k8c.ru/nubes-test/nubes"
-      version = "5.0.57"
+      version = "5.0.58"
     }
   }
 }

TEST_STAND/buck0/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     nubes = {
       source  = "terra.k8c.ru/nubes-test/nubes"
-      version = "5.0.57"
+      version = "5.0.58"
     }
   }
 }

devops/profiles/test/profile.env

@@ -3,9 +3,9 @@ NUBES_API_ENDPOINT="https://lk-api-gateway-test.ngcloud.ru/api/v1/svc"
 TOKEN_FILE="secrets/test.token"
 
 # Release versions
-RELEASE_VERSION="5.0.57"
+RELEASE_VERSION="5.0.58"
-PROVIDER_VERSION="5.0.57"
+PROVIDER_VERSION="5.0.58"
-DOCS_VERSION="5.0.57"
+DOCS_VERSION="5.0.58"
 
 # Docs generation — ONLY from docs_gen/<stand>/ (never from docs/)
 DOCS_GEN_DIR="universal_rebuild/docs_gen/test"

universal_rebuild/internal/core/client.go

@@ -612,6 +612,19 @@ func (c *UniversalClient) FindInstanceByDisplayName(ctx context.Context, service
 }
 
 func (c *UniversalClient) GetInstanceState(ctx context.Context, instanceUid string) (*InstanceStateResponse, error) {
+	const maxRetries = 3
+	baseDelay := 2 * time.Second
+
+	var lastErr error
+	for attempt := 0; attempt <= maxRetries; attempt++ {
+		if attempt > 0 {
+			select {
+			case <-time.After(baseDelay * time.Duration(1<<(attempt-1))):
+			case <-ctx.Done():
+				return nil, ctx.Err()
+			}
+		}
+
 		url := c.buildURL(fmt.Sprintf("/instances/%s", instanceUid))
 		req, err := http.NewRequestWithContext(ctx, "GET", url, nil)
 		if err != nil {
@@ -624,10 +637,15 @@ func (c *UniversalClient) GetInstanceState(ctx context.Context, instanceUid stri
 
 		resp, err := c.HttpClient.Do(req)
 		if err != nil {
-		return nil, err
+			lastErr = err
+			continue
 		}
 		defer resp.Body.Close()
 
+		if resp.StatusCode == 401 {
+			lastErr = fmt.Errorf("HTTP статус %d", resp.StatusCode)
+			continue
+		}
 		if resp.StatusCode != 200 {
 			return nil, fmt.Errorf("HTTP статус %d", resp.StatusCode)
 		}
@@ -644,6 +662,8 @@ func (c *UniversalClient) GetInstanceState(ctx context.Context, instanceUid stri
 		}
 
 		return &res.Instance, nil
+	}
+	return nil, fmt.Errorf("GetInstanceState failed after %d retries: %w", maxRetries, lastErr)
 }
 
 func isInstanceDeleted(state *InstanceStateResponse) bool {
@@ -659,6 +679,19 @@ func isInstanceDeleted(state *InstanceStateResponse) bool {
 // GetInstanceStateRaw получает состояние инстанса БЕЗ валидации статуса.
 // Используется для проверки ref-параметров: нужно читать даже deleted/suspended инстансы.
 func (c *UniversalClient) GetInstanceStateRaw(ctx context.Context, instanceUid string) (*InstanceStateResponse, error) {
+	const maxRetries = 3
+	baseDelay := 2 * time.Second
+
+	var lastErr error
+	for attempt := 0; attempt <= maxRetries; attempt++ {
+		if attempt > 0 {
+			select {
+			case <-time.After(baseDelay * time.Duration(1<<(attempt-1))):
+			case <-ctx.Done():
+				return nil, ctx.Err()
+			}
+		}
+
 		reqURL := c.buildURL(fmt.Sprintf("/instances/%s", instanceUid))
 		req, err := http.NewRequestWithContext(ctx, "GET", reqURL, nil)
 		if err != nil {
@@ -671,10 +704,15 @@ func (c *UniversalClient) GetInstanceStateRaw(ctx context.Context, instanceUid s
 
 		resp, err := c.HttpClient.Do(req)
 		if err != nil {
-		return nil, err
+			lastErr = err
+			continue
 		}
 		defer resp.Body.Close()
 
+		if resp.StatusCode == 401 {
+			lastErr = fmt.Errorf("HTTP статус %d", resp.StatusCode)
+			continue
+		}
 		if resp.StatusCode != 200 {
 			return nil, fmt.Errorf("HTTP статус %d", resp.StatusCode)
 		}
@@ -687,6 +725,8 @@ func (c *UniversalClient) GetInstanceStateRaw(ctx context.Context, instanceUid s
 		}
 
 		return &res.Instance, nil
+	}
+	return nil, fmt.Errorf("GetInstanceStateRaw failed after %d retries: %w", maxRetries, lastErr)
 }
 
 // ===== UNIVERSAL OPERATION WAIT (APPEND-ONLY) =====
@@ -932,7 +972,8 @@ func isRetryable(statusCode int) bool {
 	return statusCode == http.StatusTooManyRequests || // 429
 		statusCode == http.StatusServiceUnavailable || // 503
 		statusCode == http.StatusBadGateway || // 502
-		statusCode == http.StatusGatewayTimeout // 504
+		statusCode == http.StatusGatewayTimeout || // 504
+		statusCode == http.StatusUnauthorized // 401 — Gateway иногда отбрасывает валидный JWT
 }
 
 func (c *UniversalClient) postIgnoreResponse(ctx context.Context, path string, payload interface{}, returnLocation bool) (string, error) {