https://pastein.ru/t/-jS
Загрузка данных
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl get pods -w
NAME READY STATUS RESTARTS AGE
mfa-sessions-api-68995f6dd9-srjb4 0/2 Pending 0 0s
mfa-sessions-api-68995f6dd9-srjb4 0/2 Pending 0 0s
mfa-sessions-api-68995f6dd9-srjb4 0/2 Init:0/1 0 0s
mfa-sessions-api-68995f6dd9-srjb4 0/2 Init:0/1 0 0s
mfa-sessions-api-68995f6dd9-srjb4 0/2 Init:0/1 0 1s
mfa-sessions-api-68995f6dd9-srjb4 0/2 PodInitializing 0 2s
mfa-sessions-api-68995f6dd9-srjb4 0/2 Running 0 8s
mfa-sessions-api-68995f6dd9-srjb4 1/2 Running 0 8s
mfa-sessions-api-68995f6dd9-srjb4 1/2 Error 0 15s
mfa-sessions-api-68995f6dd9-srjb4 1/2 Running 1 (2s ago) 16s
mfa-sessions-api-68995f6dd9-srjb4 1/2 Error 1 (8s ago) 22s
mfa-sessions-api-68995f6dd9-srjb4 1/2 CrashLoopBackOff 1 (4s ago) 26s
mfa-sessions-api-68995f6dd9-srjb4 1/2 Running 2 (19s ago) 41s
mfa-sessions-api-68995f6dd9-srjb4 1/2 Error 2 (25s ago) 47s
mfa-sessions-api-68995f6dd9-srjb4 1/2 CrashLoopBackOff 2 (5s ago) 51s
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl describe pod mfa-sessions-api-68995f6dd9-srjb4
Name: mfa-sessions-api-68995f6dd9-srjb4
Namespace: isys-threat-intelligence-dyn-2
Priority: 0
Priority Class Name: rumsk1
Service Account: default
Node: afs1app-wl-176/10.7.184.58
Start Time: Wed, 07 Oct 2026 10:23:32 +0300
Labels: app=mfa-sessions-api
chart=base-1.15.3
fullname=mfa-sessions-api
heritage=Helm
isys=threat-intelligence-dyn-2
pod-template-hash=68995f6dd9
psvc=mfa-sessions-api
release=mfa-sessions-api
security.istio.io/tlsMode=istio
service.istio.io/canonical-name=mfa-sessions-api
service.istio.io/canonical-revision=feature-dyn-11
version=feature-dyn-11
workload.topology.app.farm/zone=rumsk1
Annotations: checksum/configMapsEnv: 350a2dd8f9444dac160974f4a404fa0e5f154903114b555d58773bec80234c83
checksum/secretEnv: da8becaa33d4b7b1e450d3862f07d368cfa34ed69a2d4f64371e98b68547c1ba
ci/commithash: 87eaa445
cni.projectcalico.org/containerID: 72a083065d0758f7abe06f07bed1d867f4ad0556b63ed1359b67649904a3990b
cni.projectcalico.org/podIP: 100.68.139.46/32
cni.projectcalico.org/podIPs: 100.68.139.46/32
inject.istio.io/templates: sidecar,custom
kubectl.kubernetes.io/default-container: app
kubectl.kubernetes.io/default-logs-container: app
prometheus.io/path: /stats/prometheus
prometheus.io/port: 15020
prometheus.io/scrape: true
sidecar.istio.io/proxyCPU: 1
sidecar.istio.io/proxyCPULimit: 1
sidecar.istio.io/proxyMemory: 100Mi
sidecar.istio.io/proxyMemoryLimit: 1Gi
sidecar.istio.io/status:
{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-certs","workload-socket","credential-socket","workload-cer...
sidecar.istio.io/userVolume: [{"name": "wasmfilters-dir","configMap": {"name": "threat-intelligence-dyn-2-envoy-filters"}}]
sidecar.istio.io/userVolumeMount: [{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]
Status: Running
IP: 100.68.139.46
IPs:
IP: 100.68.139.46
Controlled By: ReplicaSet/mfa-sessions-api-68995f6dd9
Init Containers:
istio-init:
Container ID: containerd://d2a3bac85b0e9d72843295910021c5f45aebf91b7ad3ce66c424cec3706b8aaa
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: <none>
Host Port: <none>
Args:
istio-iptables
-p
15001
-z
15006
-u
1337
-m
REDIRECT
-i
*
-x
-b
*
-d
15090,15021,15020
--log_output_level=default:info
State: Terminated
Reason: Completed
Exit Code: 0
Started: Wed, 07 Oct 2026 10:23:33 +0300
Finished: Wed, 07 Oct 2026 10:23:33 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 1
memory: 1Gi
Requests:
cpu: 1
memory: 100Mi
Environment: <none>
Mounts: <none>
Containers:
istio-proxy:
Container ID: containerd://57c80c0b0e65efa805e13664ef52f0d2751f32b3813fc36d0e3a915bb35f3c3f
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: 15090/TCP (http-envoy-prom)
Host Port: 0/TCP (http-envoy-prom)
Args:
proxy
sidecar
--domain
$(POD_NAMESPACE).svc.cluster.local
--proxyLogLevel=warning
--proxyComponentLogLevel=misc:error
--log_output_level=default:info
--concurrency
2
State: Running
Started: Wed, 07 Oct 2026 10:23:34 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 1
memory: 1Gi
Requests:
cpu: 1
memory: 100Mi
Readiness: http-get http://:15021/healthz/ready delay=1s timeout=3s period=2s #success=1 #failure=30
Environment:
HTTP_LOG_FORWARDER_HOST: (v1:spec.nodeName)
HTTP_LOG_FORWARDER_PORT: 9000
HTTP_LOG_FORWARDER_ENDPOINT: /
OUTPUT_CERTS: /etc/istio-certs/
ISYS_NAME: (v1:metadata.labels['isys'])
PSVC_NAME: (v1:metadata.labels['psvc'])
WORKLOAD_ZONE_NAME: (v1:metadata.labels['workload.topology.app.farm/zone'])
JWT_POLICY: third-party-jwt
PILOT_CERT_PROVIDER: istiod
CA_ADDR: istiod.istio-system.svc:15012
POD_NAME: mfa-sessions-api-68995f6dd9-srjb4 (v1:metadata.name)
POD_NAMESPACE: isys-threat-intelligence-dyn-2 (v1:metadata.namespace)
INSTANCE_IP: (v1:status.podIP)
SERVICE_ACCOUNT: (v1:spec.serviceAccountName)
HOST_IP: (v1:status.hostIP)
PROXY_CONFIG: {"tracing":{"zipkin":{"address":"jaeger-collector.istio-system:9411"},"customTags":{"workload.topology.app.farm/zone":{"environment":{"name":"WORKLOAD_ZONE_NAME"}}},"sampling":100}}
ISTIO_META_POD_PORTS: [
]
ISTIO_META_APP_CONTAINERS: app
ISTIO_META_CLUSTER_ID: Kubernetes
ISTIO_META_INTERCEPTION_MODE: REDIRECT
ISTIO_META_WORKLOAD_NAME: mfa-sessions-api
ISTIO_META_OWNER: kubernetes://apis/apps/v1/namespaces/isys-threat-intelligence-dyn-2/deployments/mfa-sessions-api
ISTIO_META_MESH_ID: cluster.local
TRUST_DOMAIN: cluster.local
ISTIO_PROMETHEUS_ANNOTATIONS: {"scrape":"true","path":"/metrics","port":"8080"}
ISTIO_KUBE_APP_PROBERS: {"/app-health/app/livez":{"httpGet":{"path":"/health/liveness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1},"/app-health/app/readyz":{"httpGet":{"path":"/health/readiness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1}}
Mounts:
/etc/istio-certs/ from istio-certs (rw)
/etc/istio/pod from istio-podinfo (rw)
/etc/istio/proxy from istio-envoy (rw)
/var/lib/istio/data from istio-data (rw)
/var/local/lib/wasm-filters from wasmfilters-dir (rw)
/var/run/secrets/credential-uds from credential-socket (rw)
/var/run/secrets/istio from istiod-ca-cert (rw)
/var/run/secrets/tokens from istio-token (rw)
/var/run/secrets/workload-spiffe-credentials from workload-certs (rw)
/var/run/secrets/workload-spiffe-uds from workload-socket (rw)
app:
Container ID: containerd://67b704c2529fa46b2d80a871472d80e8b76a968f21c44fd45b66f2917c0e20c3
Image: registry.rshbdev.ru/rshbintech/information-security/application-security/threat-intelligence/mfa-sessions-api:feature-dyn-11
Image ID: registry.rshbdev.ru/rshbintech/information-security/application-security/threat-intelligence/mfa-sessions-api@sha256:285bea8ab1f7d3e08cfb618076efafb480e4c8654dd20e7859a620e947f117e0
Port: <none>
Host Port: <none>
State: Waiting
Reason: CrashLoopBackOff
Last State: Terminated
Reason: Error
Exit Code: 1
Started: Wed, 07 Oct 2026 10:23:47 +0300
Finished: Wed, 07 Oct 2026 10:23:54 +0300
Ready: False
Restart Count: 1
Limits:
cpu: 1
memory: 2Gi
Requests:
cpu: 1
memory: 512Mi
Liveness: http-get http://:15020/app-health/app/livez delay=30s timeout=1s period=5s #success=1 #failure=5
Readiness: http-get http://:15020/app-health/app/readyz delay=15s timeout=1s period=5s #success=1 #failure=3
Environment Variables from:
mfa-sessions-api-app-cm-env ConfigMap Optional: false
mfa-sessions-api-app-secret-env Secret Optional: false
Environment: <none>
Mounts:
/secrets from app-vault-secrets (ro)
Conditions:
Type Status
Initialized True
Ready False
ContainersReady False
PodScheduled True
Volumes:
istio-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
workload-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
credential-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
workload-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-envoy:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
istio-data:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-podinfo:
Type: DownwardAPI (a volume populated by information about the pod)
Items:
metadata.labels -> labels
metadata.annotations -> annotations
istio-token:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 43200
istiod-ca-cert:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-ca-root-cert
Optional: false
wasmfilters-dir:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: threat-intelligence-dyn-2-envoy-filters
Optional: false
app-vault-secrets:
Type: CSI (a Container Storage Interface (CSI) volume source)
Driver: secrets-store.csi.k8s.io
FSType:
ReadOnly: true
VolumeAttributes: secretProviderClass=mfa-sessions-api-app-secret-provider
QoS Class: Burstable
Node-Selectors: workload.topology.app.farm/zone=rumsk1
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
workload.topology.app.farm/zone:NoSchedule op=Exists
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 27s default-scheduler Successfully assigned isys-threat-intelligence-dyn-2/mfa-sessions-api-68995f6dd9-srjb4 to afs1app-wl-176
Normal Pulled 26s kubelet spec.initContainers{istio-init}: Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
Normal Created 26s kubelet spec.initContainers{istio-init}: Created container istio-init
Normal Started 26s kubelet spec.initContainers{istio-init}: Started container istio-init
Normal Started 25s kubelet spec.containers{istio-proxy}: Started container istio-proxy
Normal Created 25s kubelet spec.containers{istio-proxy}: Created container istio-proxy
Normal Pulled 25s kubelet spec.containers{istio-proxy}: Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
Normal Pulled 20s kubelet spec.containers{app}: Successfully pulled image "registry.rshbdev.ru/rshbintech/information-security/application-security/threat-intelligence/mfa-sessions-api:feature-dyn-11" in 4.33191155s
Normal Pulling 12s (x2 over 24s) kubelet spec.containers{app}: Pulling image "registry.rshbdev.ru/rshbintech/information-security/application-security/threat-intelligence/mfa-sessions-api:feature-dyn-11"
Normal Created 12s (x2 over 20s) kubelet spec.containers{app}: Created container app
Normal Started 12s (x2 over 20s) kubelet spec.containers{app}: Started container app
Normal Pulled 12s kubelet spec.containers{app}: Successfully pulled image "registry.rshbdev.ru/rshbintech/information-security/application-security/threat-intelligence/mfa-sessions-api:feature-dyn-11" in 51.31234ms
Warning BackOff 1s (x2 over 5s) kubelet spec.containers{app}: Back-off restarting failed container
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl logs -c app mfa-sessions-api-68995f6dd9-srjb4
> @rshbintech.application-security.threat-intelligence/mfa-sessions-api@0.0.0-feature-dyn-11 start
> node main.js
Setting current schema to f2a
f2a current schema
Migrating main schema...
Setting current schema to f2a
f2a current schema
last executed migration (main): 164
migrations are not required for this launch
MIGRATIONS COMPLETE (main)
Main schema migrated successfully
Setting current schema to edrdevmetrics
edrdevmetrics current schema
Migrating metrics schema...
Setting current schema to edrdevmetrics
edrdevmetrics current schema
last executed migration (metrics): 103
migrations are not required for this launch
MIGRATIONS COMPLETE (metrics)
Metrics schema migrated successfully
[Main] Failed to start app Error: [WsBusService] Kafka connection timeout
at Timeout._onTimeout (/app/services/ws-bus.service.js:82:76)
at listOnTimeout (node:internal/timers:585:17)
at process.processTimers (node:internal/timers:521:7)
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl logs -c app mfa-sessions-api-68995f6dd9-srjb4 --previous
> @rshbintech.application-security.threat-intelligence/mfa-sessions-api@0.0.0-feature-dyn-11 start
> node main.js
Setting current schema to f2a
f2a current schema
Migrating main schema...
Setting current schema to f2a
f2a current schema
last executed migration (main): 164
migrations are not required for this launch
MIGRATIONS COMPLETE (main)
Main schema migrated successfully
Setting current schema to edrdevmetrics
edrdevmetrics current schema
Migrating metrics schema...
Setting current schema to edrdevmetrics
edrdevmetrics current schema
last executed migration (metrics): 103
migrations are not required for this launch
MIGRATIONS COMPLETE (metrics)
Metrics schema migrated successfully
[Main] Failed to start app Error: [WsBusService] Kafka connection timeout
at Timeout._onTimeout (/app/services/ws-bus.service.js:82:76)
at listOnTimeout (node:internal/timers:585:17)
at process.processTimers (node:internal/timers:521:7)
dmitriev-aal@VDI-Dmitriev-A:~$