Pastein: dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl --context rcsdstbl -n isys-cos \ > get pod -l app=cos-user-auth \ > -o yaml apiVersion: v1 items:

Загрузка данных
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl --context rcsdstbl -n isys-cos \
>   get pod -l app=cos-user-auth \
>   -o yaml
apiVersion: v1
items:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      checksum/configMapsEnv: d654ee5ba568639295420ad00c95c887e23c6f9a0a16128f2f291f48b38815f7
      checksum/secretEnv: b317acd508355c8d356c51f381b52e5cecf9844cbb0f684eb03ead83c40065c1
      cni.projectcalico.org/containerID: 6e385ca1ff7650ab4f41e48e6d63ac0400e506d441e2977e11269b28260365de
      cni.projectcalico.org/podIP: 100.79.155.86/32
      cni.projectcalico.org/podIPs: 100.79.155.86/32
      inject.istio.io/templates: sidecar,custom
      kubectl.kubernetes.io/default-container: app
      kubectl.kubernetes.io/default-logs-container: app
      kubectl.kubernetes.io/restartedAt: "2025-09-09T23:34:29+03:00"
      prometheus.io/path: /stats/prometheus
      prometheus.io/port: "15020"
      prometheus.io/scrape: "true"
      sidecar.istio.io/proxyCPU: 150m
      sidecar.istio.io/proxyCPULimit: 400m
      sidecar.istio.io/proxyMemory: 512Mi
      sidecar.istio.io/proxyMemoryLimit: 768Mi
      sidecar.istio.io/status: '{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-certs","workload-socket","credential-socket","workload-certs","istio-envoy","istio-data","istio-podinfo","istio-token","istiod-ca-cert","wasmfilters-dir"],"imagePullSecrets":null,"revision":"default"}'
      sidecar.istio.io/userVolume: '[{"name": "wasmfilters-dir","configMap": {"name":
        "cos-envoy-filters"}}]'
      sidecar.istio.io/userVolumeMount: '[{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]'
    creationTimestamp: "2026-08-27T09:40:43Z"
    generateName: cos-user-auth-66d47d6765-
    labels:
      app: cos-user-auth
      chart: base-1.15.3
      fullname: cos-user-auth
      heritage: Helm
      isys: cos
      pod-template-hash: 66d47d6765
      psvc: cos-user-auth
      release: cos-user-auth
      security.istio.io/tlsMode: istio
      service.istio.io/canonical-name: cos-user-auth
      service.istio.io/canonical-revision: 1.7.9
      version: 1.7.9
      workload.topology.app.farm/zone: rumsk1
    name: cos-user-auth-66d47d6765-xtpnb
    namespace: isys-cos
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: cos-user-auth-66d47d6765
      uid: 5250272c-9263-42ef-a64a-dd823fbfd4d4
    resourceVersion: "25401277211"
    uid: 598bd76f-c0a8-463b-a8af-29765c413231
  spec:
    automountServiceAccountToken: false
    containers:
    - args:
      - proxy
      - sidecar
      - --domain
      - $(POD_NAMESPACE).svc.cluster.local
      - --proxyLogLevel=warning
      - --proxyComponentLogLevel=misc:error
      - --log_output_level=default:info
      - --concurrency
      - "2"
      env:
      - name: HTTP_LOG_FORWARDER_HOST
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      - name: HTTP_LOG_FORWARDER_PORT
        value: "9000"
      - name: HTTP_LOG_FORWARDER_ENDPOINT
        value: /
      - name: OUTPUT_CERTS
        value: /etc/istio-certs/
      - name: ISYS_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.labels['isys']
      - name: PSVC_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.labels['psvc']
      - name: WORKLOAD_ZONE_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.labels['workload.topology.app.farm/zone']
      - name: JWT_POLICY
        value: third-party-jwt
      - name: PILOT_CERT_PROVIDER
        value: istiod
      - name: CA_ADDR
        value: istiod.istio-system.svc:15012
      - name: POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      - name: POD_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: INSTANCE_IP
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: status.podIP
      - name: SERVICE_ACCOUNT
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.serviceAccountName
      - name: HOST_IP
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: status.hostIP
      - name: PROXY_CONFIG
        value: |
          {"tracing":{"zipkin":{"address":"jaeger-collector.istio-system:9411"},"customTags":{"workload.topology.app.farm/zone":{"environment":{"name":"WORKLOAD_ZONE_NAME"}}},"sampling":100}}
      - name: ISTIO_META_POD_PORTS
        value: |-
          [
          ]
      - name: ISTIO_META_APP_CONTAINERS
        value: app
      - name: ISTIO_META_CLUSTER_ID
        value: Kubernetes
      - name: ISTIO_META_INTERCEPTION_MODE
        value: REDIRECT
      - name: ISTIO_META_WORKLOAD_NAME
        value: cos-user-auth
      - name: ISTIO_META_OWNER
        value: kubernetes://apis/apps/v1/namespaces/isys-cos/deployments/cos-user-auth
      - name: ISTIO_META_MESH_ID
        value: cluster.local
      - name: TRUST_DOMAIN
        value: cluster.local
      - name: ISTIO_PROMETHEUS_ANNOTATIONS
        value: '{"scrape":"true","path":"/metrics","port":"8080"}'
      - name: ISTIO_KUBE_APP_PROBERS
        value: '{"/app-health/app/livez":{"httpGet":{"path":"/health/liveness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1},"/app-health/app/readyz":{"httpGet":{"path":"/health/readiness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1}}'
      image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
      imagePullPolicy: IfNotPresent
      lifecycle:
        postStart:
          exec:
            command:
            - pilot-agent
            - wait
      name: istio-proxy
      ports:
      - containerPort: 15090
        name: http-envoy-prom
        protocol: TCP
      readinessProbe:
        failureThreshold: 30
        httpGet:
          path: /healthz/ready
          port: 15021
          scheme: HTTP
        initialDelaySeconds: 1
        periodSeconds: 2
        successThreshold: 1
        timeoutSeconds: 3
      resources:
        limits:
          cpu: 400m
          memory: 768Mi
        requests:
          cpu: 150m
          memory: 512Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        privileged: false
        readOnlyRootFilesystem: true
        runAsGroup: 1337
        runAsNonRoot: true
        runAsUser: 1337
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /etc/istio-certs/
        name: istio-certs
      - mountPath: /var/run/secrets/workload-spiffe-uds
        name: workload-socket
      - mountPath: /var/run/secrets/credential-uds
        name: credential-socket
      - mountPath: /var/run/secrets/workload-spiffe-credentials
        name: workload-certs
      - mountPath: /var/run/secrets/istio
        name: istiod-ca-cert
      - mountPath: /var/lib/istio/data
        name: istio-data
      - mountPath: /etc/istio/proxy
        name: istio-envoy
      - mountPath: /var/run/secrets/tokens
        name: istio-token
      - mountPath: /etc/istio/pod
        name: istio-podinfo
      - mountPath: /var/local/lib/wasm-filters
        name: wasmfilters-dir
    - envFrom:
      - configMapRef:
          name: cos-user-auth-app-cm-env
      - secretRef:
          name: cos-user-auth-app-secret-env
      image: registry.rshbdev.ru/rshbintech/crft/cos/apps/cos-user-auth/cos-user-auth:1.7.9
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 5
        httpGet:
          path: /app-health/app/livez
          port: 15020
          scheme: HTTP
        initialDelaySeconds: 240
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 1
      name: app
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /app-health/app/readyz
          port: 15020
          scheme: HTTP
        initialDelaySeconds: 240
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        limits:
          cpu: 500m
          memory: 1Gi
        requests:
          cpu: 200m
          memory: 512Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        privileged: false
        procMount: Default
        readOnlyRootFilesystem: false
        runAsGroup: 1001
        runAsNonRoot: true
        runAsUser: 1001
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /secrets
        name: app-vault-secrets
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    initContainers:
    - args:
      - istio-iptables
      - -p
      - "15001"
      - -z
      - "15006"
      - -u
      - "1337"
      - -m
      - REDIRECT
      - -i
      - '*'
      - -x
      - ""
      - -b
      - '*'
      - -d
      - 15090,15021,15020
      - --log_output_level=default:info
      image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
      imagePullPolicy: IfNotPresent
      name: istio-init
      resources:
        limits:
          cpu: 400m
          memory: 768Mi
        requests:
          cpu: 150m
          memory: 512Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          add:
          - NET_ADMIN
          - NET_RAW
          drop:
          - ALL
        privileged: false
        readOnlyRootFilesystem: false
        runAsGroup: 0
        runAsNonRoot: false
        runAsUser: 0
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
    nodeName: afs1asd-wl-267
    nodeSelector:
      workload.topology.app.farm/zone: rumsk1
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    priorityClassName: rumsk1
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1001
      fsGroupChangePolicy: OnRootMismatch
      runAsGroup: 1001
      runAsNonRoot: true
      runAsUser: 1001
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: workload.topology.app.farm/zone
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    volumes:
    - emptyDir:
        medium: Memory
      name: istio-certs
    - emptyDir: {}
      name: workload-socket
    - emptyDir: {}
      name: credential-socket
    - emptyDir: {}
      name: workload-certs
    - emptyDir:
        medium: Memory
      name: istio-envoy
    - emptyDir: {}
      name: istio-data
    - downwardAPI:
        defaultMode: 420
        items:
        - fieldRef:
            apiVersion: v1
            fieldPath: metadata.labels
          path: labels
        - fieldRef:
            apiVersion: v1
            fieldPath: metadata.annotations
          path: annotations
      name: istio-podinfo
    - name: istio-token
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            audience: istio-ca
            expirationSeconds: 43200
            path: istio-token
    - configMap:
        defaultMode: 420
        name: istio-ca-root-cert
      name: istiod-ca-cert
    - configMap:
        defaultMode: 420
        name: cos-envoy-filters
      name: wasmfilters-dir
    - csi:
        driver: secrets-store.csi.k8s.io
        readOnly: true
        volumeAttributes:
          secretProviderClass: cos-user-auth-app-secret-provider
      name: app-vault-secrets
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-08-27T09:40:47Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-08-27T09:44:59Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-08-27T09:44:59Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-08-27T09:40:43Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: containerd://a61a08b957ac7353713631c7a6967f693057c0b146cdfd1d9618cc18a6664e61
      image: registry.rshbdev.ru/rshbintech/crft/cos/apps/cos-user-auth/cos-user-auth:1.7.9
      imageID: registry.rshbdev.ru/rshbintech/crft/cos/apps/cos-user-auth/cos-user-auth@sha256:7caf82cfa58967fc3c792f980fbb3cdddcc75ae7dc084c3749ff252aa4fd9f61
      lastState: {}
      name: app
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-08-27T09:40:58Z"
    - containerID: containerd://fc06048ffc48440712e81ba05c1650e45069ee0bcbe4209ce673d4ef4168902e
      image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
      imageID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
      lastState: {}
      name: istio-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-08-27T09:40:48Z"
    hostIP: 10.21.182.211
    initContainerStatuses:
    - containerID: containerd://04fc1e09463b11811874a80f7ddd54f6d5d76e3c9b1a76d8b43635d87f4a9252
      image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
      imageID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
      lastState: {}
      name: istio-init
      ready: true
      restartCount: 0
      state:
        terminated:
          containerID: containerd://04fc1e09463b11811874a80f7ddd54f6d5d76e3c9b1a76d8b43635d87f4a9252
          exitCode: 0
          finishedAt: "2026-08-27T09:40:47Z"
          reason: Completed
          startedAt: "2026-08-27T09:40:46Z"
    phase: Running
    podIP: 100.79.155.86
    podIPs:
    - ip: 100.79.155.86
    qosClass: Burstable
    startTime: "2026-08-27T09:40:43Z"
kind: List
metadata:
  resourceVersion: ""
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl --context rcsdstbl -n isys-cos get pvc
No resources found in isys-cos namespace.
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$
Больше возможностей при регистрации:
