Pastein: dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-screeningps-dev \ &gt; get pod casemgmt-747545b658-xcfjc -o yaml apiVersion: v1 kind: Pod metadata: annotations: checksum/co

Загрузка данных
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-screeningps-dev \
>   get pod casemgmt-747545b658-xcfjc -o yaml
apiVersion: v1
kind: Pod
metadata:
  annotations:
    checksum/configMapsEnv: bd07b8a1c92972d19ba818a8321126a296dba4fc220d9c7dacbf944571f85e63
    checksum/secretEnv: 2c054ab9ea52f1ef7155091803dce64d932cbf671264802c9f41b76ff0cf7caa
    ci/commithash: 82499f50
    cni.projectcalico.org/containerID: e6111aaa04e09a27c8f1ef882ea3280e79a979e42fa1ff72060de1254e7d19e5
    cni.projectcalico.org/podIP: ""
    cni.projectcalico.org/podIPs: ""
    inject.istio.io/templates: sidecar,custom
    kubectl.kubernetes.io/default-container: app
    kubectl.kubernetes.io/default-logs-container: app
    kubectl.kubernetes.io/restartedAt: "2025-09-10T00:04:40+03:00"
    prometheus.io/path: /stats/prometheus
    prometheus.io/port: "15020"
    prometheus.io/scrape: "true"
    sidecar.istio.io/status: '{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-certs","workload-socket","credential-socket","workload-certs","istio-envoy","istio-data","istio-podinfo","istio-token","istiod-ca-cert","wasmfilters-dir"],"imagePullSecrets":null,"revision":"default"}'
    sidecar.istio.io/userVolume: '[{"name": "wasmfilters-dir","configMap": {"name":
      "screeningps-dev-envoy-filters"}}]'
    sidecar.istio.io/userVolumeMount: '[{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]'
  creationTimestamp: "2026-09-30T15:09:09Z"
  deletionGracePeriodSeconds: 30
  deletionTimestamp: "2026-10-04T08:28:37Z"
  generateName: casemgmt-747545b658-
  labels:
    app: casemgmt
    chart: base-1.15.3
    fullname: casemgmt
    heritage: Helm
    isys: screeningps-dev
    pod-template-hash: 747545b658
    psvc: casemgmt
    release: casemgmt
    security.istio.io/tlsMode: istio
    service.istio.io/canonical-name: casemgmt
    service.istio.io/canonical-revision: master
    version: master
    workload.topology.app.farm/zone: rumsk1
  name: casemgmt-747545b658-xcfjc
  namespace: isys-screeningps-dev
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: casemgmt-747545b658
    uid: f05ef13f-6aca-49f2-a864-10a737ce1895
  resourceVersion: "25666431340"
  uid: 4b3442a2-7210-4568-9885-ad4299b89209
spec:
  automountServiceAccountToken: false
  containers:
  - args:
    - proxy
    - sidecar
    - --domain
    - $(POD_NAMESPACE).svc.cluster.local
    - --proxyLogLevel=warning
    - --proxyComponentLogLevel=misc:error
    - --log_output_level=default:info
    - --concurrency
    - "2"
    env:
    - name: HTTP_LOG_FORWARDER_HOST
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: spec.nodeName
    - name: HTTP_LOG_FORWARDER_PORT
      value: "9000"
    - name: HTTP_LOG_FORWARDER_ENDPOINT
      value: /
    - name: OUTPUT_CERTS
      value: /etc/istio-certs/
    - name: ISYS_NAME
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.labels['isys']
    - name: PSVC_NAME
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.labels['psvc']
    - name: WORKLOAD_ZONE_NAME
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.labels['workload.topology.app.farm/zone']
    - name: JWT_POLICY
      value: third-party-jwt
    - name: PILOT_CERT_PROVIDER
      value: istiod
    - name: CA_ADDR
      value: istiod.istio-system.svc:15012
    - name: POD_NAME
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.name
    - name: POD_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
    - name: INSTANCE_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    - name: SERVICE_ACCOUNT
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: spec.serviceAccountName
    - name: HOST_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.hostIP
    - name: PROXY_CONFIG
      value: |
        {"tracing":{"zipkin":{"address":"jaeger-collector.istio-system:9411"},"customTags":{"workload.topology.app.farm/zone":{"environment":{"name":"WORKLOAD_ZONE_NAME"}}},"sampling":100}}
    - name: ISTIO_META_POD_PORTS
      value: |-
        [
        ]
    - name: ISTIO_META_APP_CONTAINERS
      value: app
    - name: ISTIO_META_CLUSTER_ID
      value: Kubernetes
    - name: ISTIO_META_INTERCEPTION_MODE
      value: REDIRECT
    - name: ISTIO_META_WORKLOAD_NAME
      value: casemgmt
    - name: ISTIO_META_OWNER
      value: kubernetes://apis/apps/v1/namespaces/isys-screeningps-dev/deployments/casemgmt
    - name: ISTIO_META_MESH_ID
      value: cluster.local
    - name: TRUST_DOMAIN
      value: cluster.local
    - name: ISTIO_PROMETHEUS_ANNOTATIONS
      value: '{"scrape":"true","path":"/metrics","port":"8080"}'
    - name: ISTIO_KUBE_APP_PROBERS
      value: '{"/app-health/app/livez":{"httpGet":{"path":"/health/liveness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1},"/app-health/app/readyz":{"httpGet":{"path":"/health/readiness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1}}'
    image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
    imagePullPolicy: IfNotPresent
    lifecycle:
      postStart:
        exec:
          command:
          - pilot-agent
          - wait
    name: istio-proxy
    ports:
    - containerPort: 15090
      name: http-envoy-prom
      protocol: TCP
    readinessProbe:
      failureThreshold: 30
      httpGet:
        path: /healthz/ready
        port: 15021
        scheme: HTTP
      initialDelaySeconds: 1
      periodSeconds: 2
      successThreshold: 1
      timeoutSeconds: 3
    resources:
      limits:
        cpu: 400m
        memory: 384Mi
      requests:
        cpu: 10m
        memory: 64Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      privileged: false
      readOnlyRootFilesystem: true
      runAsGroup: 1337
      runAsNonRoot: true
      runAsUser: 1337
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/istio-certs/
      name: istio-certs
    - mountPath: /var/run/secrets/workload-spiffe-uds
      name: workload-socket
    - mountPath: /var/run/secrets/credential-uds
      name: credential-socket
    - mountPath: /var/run/secrets/workload-spiffe-credentials
      name: workload-certs
    - mountPath: /var/run/secrets/istio
      name: istiod-ca-cert
    - mountPath: /var/lib/istio/data
      name: istio-data
    - mountPath: /etc/istio/proxy
      name: istio-envoy
    - mountPath: /var/run/secrets/tokens
      name: istio-token
    - mountPath: /etc/istio/pod
      name: istio-podinfo
    - mountPath: /var/local/lib/wasm-filters
      name: wasmfilters-dir
  - envFrom:
    - configMapRef:
        name: casemgmt-app-cm-env
    - secretRef:
        name: casemgmt-app-secret-env
    image: registry.rshbdev.ru/rshbintech/abs/banking-accounting/screeningps/casemgmt:master
    imagePullPolicy: Always
    livenessProbe:
      failureThreshold: 5
      httpGet:
        path: /app-health/app/livez
        port: 15020
        scheme: HTTP
      initialDelaySeconds: 400
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 1
    name: app
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /app-health/app/readyz
        port: 15020
        scheme: HTTP
      initialDelaySeconds: 400
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 1
    resources:
      limits:
        cpu: "4"
        memory: 4Gi
      requests:
        cpu: "1"
        memory: 4Gi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      privileged: false
      procMount: Default
      readOnlyRootFilesystem: false
      runAsGroup: 1001
      runAsNonRoot: true
      runAsUser: 1001
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /secrets
      name: app-vault-secrets
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  initContainers:
  - args:
    - istio-iptables
    - -p
    - "15001"
    - -z
    - "15006"
    - -u
    - "1337"
    - -m
    - REDIRECT
    - -i
    - '*'
    - -x
    - ""
    - -b
    - '*'
    - -d
    - 15090,15021,15020
    - --log_output_level=default:info
    image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
    imagePullPolicy: IfNotPresent
    name: istio-init
    resources:
      limits:
        cpu: 400m
        memory: 384Mi
      requests:
        cpu: 10m
        memory: 64Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        add:
        - NET_ADMIN
        - NET_RAW
        drop:
        - ALL
      privileged: false
      readOnlyRootFilesystem: false
      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
  nodeName: afs1app-wl-166
  nodeSelector:
    workload.topology.app.farm/zone: rumsk1
  preemptionPolicy: PreemptLowerPriority
  priority: 0
  priorityClassName: rumsk1
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext:
    fsGroup: 1001
    fsGroupChangePolicy: OnRootMismatch
    runAsGroup: 1001
    runAsNonRoot: true
    runAsUser: 1001
  serviceAccount: default
  serviceAccountName: default
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoSchedule
    key: workload.topology.app.farm/zone
    operator: Exists
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - emptyDir:
      medium: Memory
    name: istio-certs
  - emptyDir: {}
    name: workload-socket
  - emptyDir: {}
    name: credential-socket
  - emptyDir: {}
    name: workload-certs
  - emptyDir:
      medium: Memory
    name: istio-envoy
  - emptyDir: {}
    name: istio-data
  - downwardAPI:
      defaultMode: 420
      items:
      - fieldRef:
          apiVersion: v1
          fieldPath: metadata.labels
        path: labels
      - fieldRef:
          apiVersion: v1
          fieldPath: metadata.annotations
        path: annotations
    name: istio-podinfo
  - name: istio-token
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          audience: istio-ca
          expirationSeconds: 43200
          path: istio-token
  - configMap:
      defaultMode: 420
      name: istio-ca-root-cert
    name: istiod-ca-cert
  - configMap:
      defaultMode: 420
      name: screeningps-dev-envoy-filters
    name: wasmfilters-dir
  - csi:
      driver: secrets-store.csi.k8s.io
      readOnly: true
      volumeAttributes:
        secretProviderClass: casemgmt-app-secret-provider
    name: app-vault-secrets
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-09-30T15:09:11Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-10-04T08:22:33Z"
    message: 'containers with unready status: [istio-proxy app]'
    reason: ContainersNotReady
    status: "False"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-10-04T10:06:54Z"
    message: 'containers with unready status: [istio-proxy app]'
    reason: ContainersNotReady
    status: "False"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-09-30T15:09:09Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: containerd://f957617c8c5bf27f8c2cad822071821f16b4f844e351e5f61ec01e3cf445ee6f
    image: registry.rshbdev.ru/rshbintech/abs/banking-accounting/screeningps/casemgmt:master
    imageID: registry.rshbdev.ru/rshbintech/abs/banking-accounting/screeningps/casemgmt@sha256:66d14f8f4f52fe68cf7eee76fafcdc475891c87e9229c767cc939b57479c5ce6
    lastState: {}
    name: app
    ready: false
    restartCount: 0
    started: false
    state:
      terminated:
        containerID: containerd://f957617c8c5bf27f8c2cad822071821f16b4f844e351e5f61ec01e3cf445ee6f
        exitCode: 255
        finishedAt: "2026-10-04T10:06:48Z"
        reason: Unknown
        startedAt: "2026-09-30T15:09:16Z"
  - containerID: containerd://d15a49b9a0f974c9a59562c2fd30c12fa7055ed4e6afe06e5e0e2f13a2582f53
    image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
    imageID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
    lastState: {}
    name: istio-proxy
    ready: false
    restartCount: 0
    started: false
    state:
      terminated:
        containerID: containerd://d15a49b9a0f974c9a59562c2fd30c12fa7055ed4e6afe06e5e0e2f13a2582f53
        exitCode: 255
        finishedAt: "2026-10-04T10:06:48Z"
        reason: Unknown
        startedAt: "2026-09-30T15:09:11Z"
  hostIP: 10.7.184.43
  initContainerStatuses:
  - containerID: containerd://0da52e795c482d1dead96fa304de33bbbb7f35b87f67f182473d9ae56161b537
    image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
    imageID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
    lastState: {}
    name: istio-init
    ready: true
    restartCount: 0
    state:
      terminated:
        containerID: containerd://0da52e795c482d1dead96fa304de33bbbb7f35b87f67f182473d9ae56161b537
        exitCode: 0
        finishedAt: "2026-09-30T15:09:11Z"
        reason: Completed
        startedAt: "2026-09-30T15:09:11Z"
  phase: Running
  qosClass: Burstable
  startTime: "2026-09-30T15:09:09Z"
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-screeningps-dev \
>   get workloadquota rumsk1 -o yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: WorkloadQuota
metadata:
  creationTimestamp: "2026-07-28T03:01:51Z"
  generation: 1
  labels:
    app: screeningps-dev
    environment: production
    operator: platform-operator
    workload.topology.app.farm/zone: rumsk1
  name: rumsk1
  namespace: isys-screeningps-dev
  resourceVersion: "25644881620"
  uid: 666660cb-883b-4401-aa1d-395672b6f7dd
spec:
  admission:
    enabled: true
  limits:
    limits.cpu: "24"
    limits.memory: 26Gi
    requests.cpu: "24"
    requests.memory: 26Gi
  selector:
    matchLabels:
      workload.topology.app.farm/zone: rumsk1
status:
  available:
    limits.cpu: 1350m
    limits.memory: 1162Mi
    requests.cpu: 15900m
    requests.memory: 7718Mi
  used:
    limits.cpu: 22650m
    limits.memory: 25462Mi
    requests.cpu: 8100m
    requests.memory: 18906Mi
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-screeningps-dev \
>   get pods -o wide
NAME                             READY   STATUS        RESTARTS   AGE     IP               NODE             NOMINATED NODE   READINESS GATES
bff-6c5d47945c-vctwb             2/2     Running       0          7d5h    100.68.151.214   afs1app-wl-109   <none>           <none>
casemgmt-747545b658-xcfjc        0/2     Terminating   0          6d23h   <none>           afs1app-wl-166   <none>           <none>
csm-7f9c6dfd74-6ngln             2/2     Running       0          5d23h   100.68.155.12    afs1app-wl-160   <none>           <none>
frontend-7568b486d6-w9lbt        2/2     Running       0          41d     100.68.153.233   afs1app-wl-142   <none>           <none>
fuzzy-bb4478cb6-skdjt            2/2     Running       0          7d5h    100.68.129.75    afs1app-wl-165   <none>           <none>
kafka-kafka-ui-7d747fdf8-blzvn   2/2     Running       0          41d     100.68.135.200   afs1app-wl-180   <none>           <none>
loadjob-6cbc7f99d7-5dlbc         2/2     Running       0          7d4h    100.68.133.135   afs1app-wl-098   <none>           <none>
migrations-6896574cb9-s6t4d      2/2     Running       0          41d     100.68.159.121   afs1app-wl-139   <none>           <none>
publisher-58c9b949b5-9d2r5       2/2     Running       0          41d     100.68.128.253   afs1app-wl-112   <none>           <none>
transport-56856784f6-kgtb8       2/2     Running       0          6d23h   100.68.129.197   afs1app-wl-173   <none>           <none>
dmitriev-aal@VDI-Dmitriev-A:~$
Больше возможностей при регистрации:
