---

dmitriev-aal@VDI-Dmitriev-A:~$ kubectl -n isys-threat-intelligence-dyn-2 \
>   get gateway threat-intelligence-dyn-2 -o yaml
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
  creationTimestamp: "2026-10-06T12:53:43Z"
  generation: 1
  labels:
    app: threat-intelligence-dyn-2
    environment: production
    operator: platform-operator
  name: threat-intelligence-dyn-2
  namespace: isys-threat-intelligence-dyn-2
  resourceVersion: "25682226110"
  uid: 547831f5-d89c-44ce-b31a-48fa9069a734
spec:
  selector:
    app: istio-ingressgateway
  servers:
  - hosts:
    - '*.threat-intelligence-dyn-2.dev.rshbdev.ru'
    port:
      name: https
      number: 443
      protocol: HTTPS
    tls:
      credentialName: tls-threat-intelligence-dyn-2
      mode: SIMPLE
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl -n isys-threat-intelligence-dyn-2 \
>   get svc mfa-sessions-api -o wide
NAME               TYPE        CLUSTER-IP    EXTERNAL-IP   PORT(S)   AGE   SELECTOR
mfa-sessions-api   ClusterIP   100.68.1.59   <none>        80/TCP    45m   app=mfa-sessions-api,fullname=mfa-sessions-api,release=mfa-sessions-api
dmitriev-aal@VDI-Dmitriev-A:~$ 
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl -n isys-threat-intelligence-dyn-2 \
>   get endpoints mfa-sessions-api -o wide
NAME               ENDPOINTS             AGE
mfa-sessions-api   100.68.131.209:8080   45m
dmitriev-aal@VDI-Dmitriev-A:~$ curl -vk \
>   https://mfa-sessions-api.threat-intelligence-dyn-2.dev.rshbdev.ru/api/doc
*   Trying 100.68.64.3:443...
* TCP_NODELAY set
* Connected to mfa-sessions-api.threat-intelligence-dyn-2.dev.rshbdev.ru (100.68.64.3) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=RU; ST=Moscow; L=Moscow; street=Profsoyznaya 125A; O=RSHB-Intech; OU=BIR; CN=*.threat-intelligence-dyn-2.dev.rshbdev.ru
*  start date: Oct  6 12:53:14 2026 GMT
*  expire date: Jan  4 12:53:44 2027 GMT
*  issuer: C=RU; L=Moscow; O=RSHB-Intech; OU=CKPR; CN=rshbdev.ru Intermediate Authority
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x558ac18f5dc0)
> GET /api/doc HTTP/2
> Host: mfa-sessions-api.threat-intelligence-dyn-2.dev.rshbdev.ru
> user-agent: curl/7.68.0
> accept: */*
> 
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 2147483647)!
< HTTP/2 200 
< vary: Origin
< access-control-allow-credentials: true
< content-type: text/html; charset=utf-8
< content-security-policy: default-src 'self'; base-uri 'self'; font-src 'self' https: data:; frame-ancestors 'self'; img-src 'self' data: validator.swagger.io; object-src 'none'; script-src 'self' ; script-src-attr 'none'; style-src 'self' https: ; upgrade-insecure-requests;
< content-length: 922
< date: Wed, 07 Oct 2026 14:06:13 GMT
< x-b3-traceid: 471f5e8f7dd77bd41307baff45bfda6c
< x-b3-spanid: ef5dbfbc7c9d3ff3
< x-b3-parentspanid: 1307baff45bfda6c
< x-b3-sampled: 1
< x-request-id: d5d861e7-9798-42f9-9ddd-4a5662f78835
< strict-transport-security: max-age=31536000; includeSubDomains
< server: istio-envoy
< 
<!-- HTML for static distribution bundle build -->
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <meta charset="UTF-8">
      <title>Swagger UI</title>
      <link rel="stylesheet" type="text/css" href="/api/doc/static/swagger-ui.css" />
      <link rel="stylesheet" type="text/css" href="/api/doc/static/index.css" />
      
      
      <link rel="icon" type="image/png" href="/api/doc/static/favicon-32x32.png" sizes="32x32" />
      <link rel="icon" type="image/png" href="/api/doc/static/favicon-16x16.png" sizes="16x16" />
      
      </head>

      <body>
      <div id="swagger-ui"></div>
      <script src="/api/doc/static/swagger-ui-bundle.js" charset="UTF-8"> </script>
      <script src="/api/doc/static/swagger-ui-standalone-preset.js" charset="UTF-8"> </script>
      <script src="/api/doc/static/swagger-initializer.js" charset="UTF-8"> </script>
      
      </body>
      </html>
* Connection #0 to host mfa-sessions-api.threat-intelligence-dyn-2.dev.rshbdev.ru left intact
      dmitriev-aal@VDI-Dmitriev-A:~$