https://pastein.ru/t/LyM
Загрузка данных
Running with gitlab-runner 15.8.0 (12335144)
on gitlab-runner-gitlab-runner-64775b4cff-qpdc8 9cgwHtm5, system ID: r_FsAm41LqwxCr
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.11 ...
Using attach strategy to execute scripts...
Preparing environment
00:06
Waiting for pod gitlab-runners/runner-9cgwhtm5-project-53983-concurrent-127rfj to be running, status is Pending
ContainersNotInitialized: "containers with incomplete status: [init-permissions]"
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Waiting for pod gitlab-runners/runner-9cgwhtm5-project-53983-concurrent-127rfj to be running, status is Pending
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-9cgwhtm5-project-53983-concurrent-127rfj via gitlab-runner-gitlab-runner-64775b4cff-qpdc8...
Getting source from Git repository
00:02
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow/.git/
Created fresh repository.
Checking out 522015c8 as master...
Skipping Git submodules setup
Downloading artifacts
00:02
Downloading artifacts for dockerfilegen (23379531)...
Downloading artifacts from coordinator... ok id=23379531 responseStatus=200 OK token=64_n_mLt
Downloading artifacts for devsecops_antivirus_scan (23379527)...
Downloading artifacts from coordinator... ok id=23379527 responseStatus=200 OK token=64_n_mLt
Downloading artifacts for build (23379535)...
Downloading artifacts from coordinator... ok id=23379535 responseStatus=200 OK token=64_n_mLt
Downloading artifacts for unit (23379537)...
Downloading artifacts from coordinator... ok id=23379537 responseStatus=200 OK token=64_n_mLt
Executing "step_script" stage of the job script
11:20
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: devstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=devstbl
++ CLUSTER=devstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ dev = production ]]
++ export NAMESPACE=isys-flow-adapters-dev
++ NAMESPACE=isys-flow-adapters-dev
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context devstbl -n isys-flow-adapters-dev history pc-flow
+++ tail -1
+++ cut -f1,3
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ deployed =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"
++ helmfile --environment devstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow/-/pipelines/3356216 --set additionalWorkloadAnnotations.gitlabCommit=522015c8aeedf0434cb1282e9966e374c784188e
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow
no matches for path: envs/dev/devstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=vault-secrets-pc-flow, chart=rshb-charts/raw
Comparing release=psvc-pc-flow, chart=rshb-charts/raw
Comparing release=links-pc-flow, chart=rshb-charts/raw
Comparing release=pc-flow, chart=rshb-charts/base
isys-flow-adapters-dev, pc-flow, Deployment (apps) has changed:
# Source: base/templates/workload.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: pc-flow
labels:
app: pc-flow
fullname: pc-flow
chart: base-1.15.2
release: pc-flow
heritage: Helm
isys: "flow-adapters-dev"
psvc: "pc-flow"
version: "master"
workload.topology.app.farm/zone: "rumsk1"
annotations:
- gitlabCommit: 06dd14a164f38db4387f497e44f3547ebeec65e1
- gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow/-/pipelines/3340944
- platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 06dd14a1
- platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3340944"
+ gitlabCommit: 522015c8aeedf0434cb1282e9966e374c784188e
+ gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow/-/pipelines/3356216
+ platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 522015c8
+ platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3356216"
spec:
strategy:
type: RollingUpdate
replicas: 1
selector:
matchLabels:
app: pc-flow
fullname: pc-flow
release: pc-flow
template:
metadata:
labels:
app: pc-flow
fullname: pc-flow
chart: base-1.15.2
release: pc-flow
heritage: Helm
isys: "flow-adapters-dev"
psvc: "pc-flow"
version: "master"
workload.topology.app.farm/zone: "rumsk1"
annotations:
- checksum/configMapsEnv: "0e3ff0b904071015da9c0901b394555aeac19630c0ed8fe50c5ae3e59aaa6274"
+ checksum/configMapsEnv: "4a773a7b75abf1a60c639ed36c10cefd8b568c23272caa7521871b9c52ff1962"
checksum/secretEnv: "c032f747bde962b6e965f532f30628d68695e34a3f4bcad63f905ff7372dcbdb"
- ci/commithash: "06dd14a1"
+ ci/commithash: "522015c8"
inject.istio.io/templates: "sidecar,custom"
prometheus.io/path: "/metrics"
prometheus.io/port: "8080"
prometheus.io/scrape: "true"
sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"flow-adapters-dev-envoy-filters\"}}]"
sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
spec:
automountServiceAccountToken: false
serviceAccountName: default
nodeSelector:
workload.topology.app.farm/zone: rumsk1
priorityClassName: rumsk1
containers:
- name: app
image: registry.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow:master
imagePullPolicy: Always
envFrom:
- configMapRef:
name: pc-flow-app-cm-env
- secretRef:
name: pc-flow-app-secret-env
resources:
limits:
cpu: 1
memory: 768Mi
requests:
cpu: 1
memory: 768Mi
ports:
startupProbe:
failureThreshold: 60
httpGet:
path: /health/liveness
port: 8080
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
livenessProbe:
failureThreshold: 5
httpGet:
path: /health/liveness
port: 8080
initialDelaySeconds: 30
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 3
readinessProbe:
failureThreshold: 3
httpGet:
path: /health/readiness
port: 8080
initialDelaySeconds: 30
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 3
volumeMounts:
- name: app-vault-secrets
mountPath: /secrets
readOnly: true
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
procMount: Default
readOnlyRootFilesystem: false
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
securityContext:
fsGroup: 1001
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
tolerations:
- effect: NoSchedule
key: workload.topology.app.farm/zone
operator: Exists
hostNetwork: false
volumes:
- name: app-vault-secrets
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: pc-flow-app-secret-provider
isys-flow-adapters-dev, pc-flow-app-cm-env, ConfigMap (v1) has changed:
# Source: base/templates/cm-env.yaml
apiVersion: v1
kind: ConfigMap
metadata:
name: pc-flow-app-cm-env
labels:
app: pc-flow
fullname: pc-flow
chart: base-1.15.2
release: pc-flow
heritage: Helm
isys: "flow-adapters-dev"
psvc: "pc-flow"
version: "master"
workload.topology.app.farm/zone: "rumsk1"
data:
APP_KAFKA_BOOTSTRAP_OWNFIN_SERVER: "adapter-ownfin-cluster.isys-flow-adapters-dev-links:9092"
+ APP_KAFKA_OWNFIN_CLUSTER_PRODUCER: "cluster-producer"
APP_KAFKA_TOPIC_PLT_NOTIFY_AVAILABLE_PUB: "plt_notify_available_pub"
APP_KAFKA_TOPIC_PLT_NOTIFY_EXT_PUB: "plt_notify_ext_pub"
APP_KAFKA_TOPIC_PLT_NOTIFY_EXT_REQ: "plt_notify_ext_req"
APP_LOG_LEVEL_RU_RSHB: "TRACE"
APP_LOG_LEVEL_RU_RSHBINTECH: "TRACE"
APP_LOG_LEVEL_RU_RSHBINTECH_LOGGING_STARTER_ASPECT: "TRACE"
APP_LOG_LEVEL_SPRINGFRAMEWORK: "INFO"
APP_VALIDATOR_URL: "http://bd-validator.isys-integration-core-dev"
JAVA_OPTS: "-XX:+PrintFlagsFinal -XX:MaxRAMPercentage=75.0 -XX:MinRAMPercentage=75.0 -XX:+UseTransparentHugePages"
KUBERNETES_CLUSTER: "DEV"
LOG_DATE_FORMAT: "yyyy-MM-dd HH:mm:ss.SSS"
LOG_MESSAGEFORMAT: "false"
LOG_ORDER_CLASS: "30"
LOG_ORDER_CLUSTER: "65"
LOG_ORDER_DIRECTION: "40"
LOG_ORDER_ENDPOINT: "45"
LOG_ORDER_LEVEL: "10"
LOG_ORDER_LOGGERNAME: "55"
LOG_ORDER_MESSAGE: "20"
LOG_ORDER_METHOD: "35"
LOG_ORDER_OFFSET: "15"
LOG_ORDER_QUERYSTRING: "50"
LOG_ORDER_THREAD: "60"
LOG_ORDER_TIMESTAMP: "5"
LOG_ORDER_TRACEID: "25"
LOG_SHOW_SENSITIVE_DATA: "true"
SPRING_PROFILES_ACTIVE: "dev"
Listing releases matching ^pjob-pc-flow$
Listing releases matching ^exsvc-pc-flow$
Listing releases matching ^data-pc-flow$
Listing releases matching ^assets-config-pc-flow$
Listing releases matching ^platform-database-pc-flow$
Listing releases matching ^pc-flow-raw$
Listing releases matching ^pc-flow-grafana-dashboard$
Listing releases matching ^pc-flow-prometheus-rules$
Listing releases matching ^pc-flow-rumsk1$
Listing releases matching ^pc-flow-rumsk2$
Upgrading release=pc-flow, chart=rshb-charts/base
FAILED RELEASES:
NAME
pc-flow
in deploy/helmfile.yaml: failed processing release pc-flow: command "/usr/local/link/helm" exited with non-zero status:
PATH:
/usr/local/link/helm
ARGS:
0: helm (4 bytes)
1: --kube-context (14 bytes)
2: devstbl (7 bytes)
3: upgrade (7 bytes)
4: --install (9 bytes)
5: --reset-values (14 bytes)
6: pc-flow (7 bytes)
7: rshb-charts/base (16 bytes)
8: --version (9 bytes)
9: 1.15.2 (6 bytes)
10: --wait (6 bytes)
11: --timeout (9 bytes)
12: 600s (4 bytes)
13: --atomic (8 bytes)
14: --kube-context (14 bytes)
15: devstbl (7 bytes)
16: --namespace (11 bytes)
17: isys-flow-adapters-dev (22 bytes)
18: --values (8 bytes)
19: /tmp/helmfile3657023553/isys-flow-adapters-dev-pc-flow-values-6c5947585 (71 bytes)
20: --values (8 bytes)
21: /tmp/helmfile1659182511/isys-flow-adapters-dev-pc-flow-values-f577484b9 (71 bytes)
22: --set (5 bytes)
23: additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow/-/pipelines/3356216 (153 bytes)
24: --set (5 bytes)
25: additionalWorkloadAnnotations.gitlabCommit=522015c8aeedf0434cb1282e9966e374c784188e (83 bytes)
26: --history-max (13 bytes)
27: 10 (2 bytes)
ERROR:
exit status 1
EXIT STATUS
1
STDERR:
Error: UPGRADE FAILED: release pc-flow failed, and has been rolled back due to atomic being set: timed out waiting for the condition
COMBINED OUTPUT:
Error: UPGRADE FAILED: release pc-flow failed, and has been rolled back due to atomic being set: timed out waiting for the condition
Uploading artifacts for failed job
00:01
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories
Uploading artifacts as "dotenv" to coordinator... 201 Created id=23380556 responseStatus=201 Created token=64_n_mLt
Cleaning up project directory and file based variables
00:01
ERROR: Job failed: command terminated with exit code 1
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl get pods | grep pc-flow
pc-flow-66855d5679-cp4b4 2/2 Running 0 5d18h
pc-flow-757f958cc9-25cfj 1/2 CrashLoopBackOff 6 (21s ago) 9m12s
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl describe pod pc-flow-66855d5679-cp4b4
Name: pc-flow-66855d5679-cp4b4
Namespace: isys-flow-adapters-dev
Priority: 0
Priority Class Name: rumsk1
Service Account: default
Node: afs1app-wl-125/10.7.182.15
Start Time: Tue, 14 Jul 2026 18:38:46 +0300
Labels: app=pc-flow
chart=base-1.15.2
fullname=pc-flow
heritage=Helm
isys=flow-adapters-dev
pod-template-hash=66855d5679
psvc=pc-flow
release=pc-flow
security.istio.io/tlsMode=istio
service.istio.io/canonical-name=pc-flow
service.istio.io/canonical-revision=master
version=master
workload.topology.app.farm/zone=rumsk1
Annotations: checksum/configMapsEnv: 0e3ff0b904071015da9c0901b394555aeac19630c0ed8fe50c5ae3e59aaa6274
checksum/secretEnv: c032f747bde962b6e965f532f30628d68695e34a3f4bcad63f905ff7372dcbdb
ci/commithash: 06dd14a1
cni.projectcalico.org/containerID: 659679a0c52ff6b245df95ef4a06b13591c436dde5f5c62a04d2459b782fdf33
cni.projectcalico.org/podIP: 100.68.139.154/32
cni.projectcalico.org/podIPs: 100.68.139.154/32
inject.istio.io/templates: sidecar,custom
kubectl.kubernetes.io/default-container: app
kubectl.kubernetes.io/default-logs-container: app
kubectl.kubernetes.io/restartedAt: 2025-09-09T23:20:32+03:00
production.platform.ckpr.integrations.rshbintech.ru/workloadquota-reservation-id:
c41f371265a7a7b3cf58b656f494cbe465108378f4cf57b8ecea2651e61e1d4b
prometheus.io/path: /stats/prometheus
prometheus.io/port: 15020
prometheus.io/scrape: true
sidecar.istio.io/status:
{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-certs","workload-socket","credential-socket","workload-cer...
sidecar.istio.io/userVolume: [{"name": "wasmfilters-dir","configMap": {"name": "flow-adapters-dev-envoy-filters"}}]
sidecar.istio.io/userVolumeMount: [{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]
Status: Running
IP: 100.68.139.154
IPs:
IP: 100.68.139.154
Controlled By: ReplicaSet/pc-flow-66855d5679
Init Containers:
istio-init:
Container ID: containerd://76a79e97a42a1656bc3eac41ab789286233cfe24cd134d856729084a659c237e
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: <none>
Host Port: <none>
Args:
istio-iptables
-p
15001
-z
15006
-u
1337
-m
REDIRECT
-i
*
-x
-b
*
-d
15090,15021,15020
--log_output_level=default:info
State: Terminated
Reason: Completed
Exit Code: 0
Started: Tue, 14 Jul 2026 18:38:48 +0300
Finished: Tue, 14 Jul 2026 18:38:48 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 400m
memory: 384Mi
Requests:
cpu: 10m
memory: 64Mi
Environment: <none>
Mounts: <none>
Containers:
istio-proxy:
Container ID: containerd://291ec53ce4ce8b3b020f17d988058b7bd7ab82be013f39fa34d7087e991b1efb
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: 15090/TCP (http-envoy-prom)
Host Port: 0/TCP (http-envoy-prom)
Args:
proxy
sidecar
--domain
$(POD_NAMESPACE).svc.cluster.local
--proxyLogLevel=warning
--proxyComponentLogLevel=misc:error
--log_output_level=default:info
--concurrency
2
State: Running
Started: Tue, 14 Jul 2026 18:38:48 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 400m
memory: 384Mi
Requests:
cpu: 10m
memory: 64Mi
Readiness: http-get http://:15021/healthz/ready delay=1s timeout=3s period=2s #success=1 #failure=30
Environment:
HTTP_LOG_FORWARDER_HOST: (v1:spec.nodeName)
HTTP_LOG_FORWARDER_PORT: 9000
HTTP_LOG_FORWARDER_ENDPOINT: /
OUTPUT_CERTS: /etc/istio-certs/
ISYS_NAME: (v1:metadata.labels['isys'])
PSVC_NAME: (v1:metadata.labels['psvc'])
WORKLOAD_ZONE_NAME: (v1:metadata.labels['workload.topology.app.farm/zone'])
JWT_POLICY: third-party-jwt
PILOT_CERT_PROVIDER: istiod
CA_ADDR: istiod.istio-system.svc:15012
POD_NAME: pc-flow-66855d5679-cp4b4 (v1:metadata.name)
POD_NAMESPACE: isys-flow-adapters-dev (v1:metadata.namespace)
INSTANCE_IP: (v1:status.podIP)
SERVICE_ACCOUNT: (v1:spec.serviceAccountName)
HOST_IP: (v1:status.hostIP)
PROXY_CONFIG: {"tracing":{"zipkin":{"address":"jaeger-collector.istio-system:9411"},"customTags":{"workload.topology.app.farm/zone":{"environment":{"name":"WORKLOAD_ZONE_NAME"}}},"sampling":100}}
ISTIO_META_POD_PORTS: [
]
ISTIO_META_APP_CONTAINERS: app
ISTIO_META_CLUSTER_ID: Kubernetes
ISTIO_META_INTERCEPTION_MODE: REDIRECT
ISTIO_META_WORKLOAD_NAME: pc-flow
ISTIO_META_OWNER: kubernetes://apis/apps/v1/namespaces/isys-flow-adapters-dev/deployments/pc-flow
ISTIO_META_MESH_ID: cluster.local
TRUST_DOMAIN: cluster.local
ISTIO_PROMETHEUS_ANNOTATIONS: {"scrape":"true","path":"/metrics","port":"8080"}
ISTIO_KUBE_APP_PROBERS: {"/app-health/app/livez":{"httpGet":{"path":"/health/liveness","port":8080,"scheme":"HTTP"},"timeoutSeconds":3},"/app-health/app/readyz":{"httpGet":{"path":"/health/readiness","port":8080,"scheme":"HTTP"},"timeoutSeconds":3},"/app-health/app/startupz":{"httpGet":{"path":"/health/liveness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1}}
Mounts:
/etc/istio-certs/ from istio-certs (rw)
/etc/istio/pod from istio-podinfo (rw)
/etc/istio/proxy from istio-envoy (rw)
/var/lib/istio/data from istio-data (rw)
/var/local/lib/wasm-filters from wasmfilters-dir (rw)
/var/run/secrets/credential-uds from credential-socket (rw)
/var/run/secrets/istio from istiod-ca-cert (rw)
/var/run/secrets/tokens from istio-token (rw)
/var/run/secrets/workload-spiffe-credentials from workload-certs (rw)
/var/run/secrets/workload-spiffe-uds from workload-socket (rw)
app:
Container ID: containerd://1b8fcd4b47801e8092a0fd5529cef1aa1ad97deeb657e8529ef899c1e794caba
Image: registry.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow:master
Image ID: registry.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow@sha256:ae19d0d01aac55a86de3b40cb6e875a19216b996082da545e55f22eabc8ff37d
Port: <none>
Host Port: <none>
State: Running
Started: Tue, 14 Jul 2026 18:38:56 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 1
memory: 768Mi
Requests:
cpu: 1
memory: 768Mi
Liveness: http-get http://:15020/app-health/app/livez delay=30s timeout=3s period=5s #success=1 #failure=5
Readiness: http-get http://:15020/app-health/app/readyz delay=30s timeout=3s period=5s #success=1 #failure=3
Startup: http-get http://:15020/app-health/app/startupz delay=0s timeout=1s period=5s #success=1 #failure=60
Environment Variables from:
pc-flow-app-cm-env ConfigMap Optional: false
pc-flow-app-secret-env Secret Optional: false
Environment: <none>
Mounts:
/secrets from app-vault-secrets (ro)
Conditions:
Type Status
Initialized True
Ready True
ContainersReady True
PodScheduled True
Volumes:
istio-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
workload-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
credential-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
workload-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-envoy:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
istio-data:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-podinfo:
Type: DownwardAPI (a volume populated by information about the pod)
Items:
metadata.labels -> labels
metadata.annotations -> annotations
istio-token:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 43200
istiod-ca-cert:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-ca-root-cert
Optional: false
wasmfilters-dir:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: flow-adapters-dev-envoy-filters
Optional: false
app-vault-secrets:
Type: CSI (a Container Storage Interface (CSI) volume source)
Driver: secrets-store.csi.k8s.io
FSType:
ReadOnly: true
VolumeAttributes: secretProviderClass=pc-flow-app-secret-provider
QoS Class: Burstable
Node-Selectors: workload.topology.app.farm/zone=rumsk1
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
workload.topology.app.farm/zone:NoSchedule op=Exists
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal SecretRotationComplete 102s (x4157 over 5d18h) csi-secrets-store-rotation successfully rotated K8s secret pc-flow-app-secret-env
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl describe pod pc-flow-757f958cc9-25cfj
Name: pc-flow-757f958cc9-25cfj
Namespace: isys-flow-adapters-dev
Priority: 0
Priority Class Name: rumsk1
Service Account: default
Node: afs1app-wl-163/10.7.184.40
Start Time: Mon, 20 Jul 2026 13:04:32 +0300
Labels: app=pc-flow
chart=base-1.15.2
fullname=pc-flow
heritage=Helm
isys=flow-adapters-dev
pod-template-hash=757f958cc9
psvc=pc-flow
release=pc-flow
security.istio.io/tlsMode=istio
service.istio.io/canonical-name=pc-flow
service.istio.io/canonical-revision=master
version=master
workload.topology.app.farm/zone=rumsk1
Annotations: checksum/configMapsEnv: 4a773a7b75abf1a60c639ed36c10cefd8b568c23272caa7521871b9c52ff1962
checksum/secretEnv: c032f747bde962b6e965f532f30628d68695e34a3f4bcad63f905ff7372dcbdb
ci/commithash: 522015c8
cni.projectcalico.org/containerID: 71461d3c69dfc5415cdd72351ba0cef4f658aee14f2419f3a295667c95588acd
cni.projectcalico.org/podIP: 100.68.141.93/32
cni.projectcalico.org/podIPs: 100.68.141.93/32
inject.istio.io/templates: sidecar,custom
kubectl.kubernetes.io/default-container: app
kubectl.kubernetes.io/default-logs-container: app
kubectl.kubernetes.io/restartedAt: 2025-09-09T23:20:32+03:00
production.platform.ckpr.integrations.rshbintech.ru/workloadquota-reservation-id:
cafa6a7639a8a5184ed0b7eb58102f2fc8f086911767cb91af68b320cc905fe6
prometheus.io/path: /stats/prometheus
prometheus.io/port: 15020
prometheus.io/scrape: true
sidecar.istio.io/status:
{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-certs","workload-socket","credential-socket","workload-cer...
sidecar.istio.io/userVolume: [{"name": "wasmfilters-dir","configMap": {"name": "flow-adapters-dev-envoy-filters"}}]
sidecar.istio.io/userVolumeMount: [{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]
Status: Running
IP: 100.68.141.93
IPs:
IP: 100.68.141.93
Controlled By: ReplicaSet/pc-flow-757f958cc9
Init Containers:
istio-init:
Container ID: containerd://5bbd857083c34262806125db120165791188d57370d1e6b8d8cb2e9699ac4f5b
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: <none>
Host Port: <none>
Args:
istio-iptables
-p
15001
-z
15006
-u
1337
-m
REDIRECT
-i
*
-x
-b
*
-d
15090,15021,15020
--log_output_level=default:info
State: Terminated
Reason: Completed
Exit Code: 0
Started: Mon, 20 Jul 2026 13:04:34 +0300
Finished: Mon, 20 Jul 2026 13:04:34 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 400m
memory: 384Mi
Requests:
cpu: 10m
memory: 64Mi
Environment: <none>
Mounts: <none>
Containers:
istio-proxy:
Container ID: containerd://398252becc30a8cb9bbe5bba655857eba31af0781a10ae097b777cd287b5013d
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: 15090/TCP (http-envoy-prom)
Host Port: 0/TCP (http-envoy-prom)
Args:
proxy
sidecar
--domain
$(POD_NAMESPACE).svc.cluster.local
--proxyLogLevel=warning
--proxyComponentLogLevel=misc:error
--log_output_level=default:info
--concurrency
2
State: Running
Started: Mon, 20 Jul 2026 13:04:34 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 400m
memory: 384Mi
Requests:
cpu: 10m
memory: 64Mi
Readiness: http-get http://:15021/healthz/ready delay=1s timeout=3s period=2s #success=1 #failure=30
Environment:
HTTP_LOG_FORWARDER_HOST: (v1:spec.nodeName)
HTTP_LOG_FORWARDER_PORT: 9000
HTTP_LOG_FORWARDER_ENDPOINT: /
OUTPUT_CERTS: /etc/istio-certs/
ISYS_NAME: (v1:metadata.labels['isys'])
PSVC_NAME: (v1:metadata.labels['psvc'])
WORKLOAD_ZONE_NAME: (v1:metadata.labels['workload.topology.app.farm/zone'])
JWT_POLICY: third-party-jwt
PILOT_CERT_PROVIDER: istiod
CA_ADDR: istiod.istio-system.svc:15012
POD_NAME: pc-flow-757f958cc9-25cfj (v1:metadata.name)
POD_NAMESPACE: isys-flow-adapters-dev (v1:metadata.namespace)
INSTANCE_IP: (v1:status.podIP)
SERVICE_ACCOUNT: (v1:spec.serviceAccountName)
HOST_IP: (v1:status.hostIP)
PROXY_CONFIG: {"tracing":{"zipkin":{"address":"jaeger-collector.istio-system:9411"},"customTags":{"workload.topology.app.farm/zone":{"environment":{"name":"WORKLOAD_ZONE_NAME"}}},"sampling":100}}
ISTIO_META_POD_PORTS: [
]
ISTIO_META_APP_CONTAINERS: app
ISTIO_META_CLUSTER_ID: Kubernetes
ISTIO_META_INTERCEPTION_MODE: REDIRECT
ISTIO_META_WORKLOAD_NAME: pc-flow
ISTIO_META_OWNER: kubernetes://apis/apps/v1/namespaces/isys-flow-adapters-dev/deployments/pc-flow
ISTIO_META_MESH_ID: cluster.local
TRUST_DOMAIN: cluster.local
ISTIO_PROMETHEUS_ANNOTATIONS: {"scrape":"true","path":"/metrics","port":"8080"}
ISTIO_KUBE_APP_PROBERS: {"/app-health/app/livez":{"httpGet":{"path":"/health/liveness","port":8080,"scheme":"HTTP"},"timeoutSeconds":3},"/app-health/app/readyz":{"httpGet":{"path":"/health/readiness","port":8080,"scheme":"HTTP"},"timeoutSeconds":3},"/app-health/app/startupz":{"httpGet":{"path":"/health/liveness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1}}
Mounts:
/etc/istio-certs/ from istio-certs (rw)
/etc/istio/pod from istio-podinfo (rw)
/etc/istio/proxy from istio-envoy (rw)
/var/lib/istio/data from istio-data (rw)
/var/local/lib/wasm-filters from wasmfilters-dir (rw)
/var/run/secrets/credential-uds from credential-socket (rw)
/var/run/secrets/istio from istiod-ca-cert (rw)
/var/run/secrets/tokens from istio-token (rw)
/var/run/secrets/workload-spiffe-credentials from workload-certs (rw)
/var/run/secrets/workload-spiffe-uds from workload-socket (rw)
app:
Container ID: containerd://8d69f2bf22b3e71684025ada80896e362238dd1b403aeddfb36dfacc808d2ab4
Image: registry.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow:master
Image ID: registry.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow@sha256:3dfd78748dbd5a700adde2ea321ddf5508245b3ff620a083b263068652f88c22
Port: <none>
Host Port: <none>
State: Waiting
Reason: CrashLoopBackOff
Last State: Terminated
Reason: Error
Exit Code: 1
Started: Mon, 20 Jul 2026 13:12:57 +0300
Finished: Mon, 20 Jul 2026 13:13:23 +0300
Ready: False
Restart Count: 6
Limits:
cpu: 1
memory: 768Mi
Requests:
cpu: 1
memory: 768Mi
Liveness: http-get http://:15020/app-health/app/livez delay=30s timeout=3s period=5s #success=1 #failure=5
Readiness: http-get http://:15020/app-health/app/readyz delay=30s timeout=3s period=5s #success=1 #failure=3
Startup: http-get http://:15020/app-health/app/startupz delay=0s timeout=1s period=5s #success=1 #failure=60
Environment Variables from:
pc-flow-app-cm-env ConfigMap Optional: false
pc-flow-app-secret-env Secret Optional: false
Environment: <none>
Mounts:
/secrets from app-vault-secrets (ro)
Conditions:
Type Status
Initialized True
Ready False
ContainersReady False
PodScheduled True
Volumes:
istio-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
workload-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
credential-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
workload-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-envoy:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
istio-data:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-podinfo:
Type: DownwardAPI (a volume populated by information about the pod)
Items:
metadata.labels -> labels
metadata.annotations -> annotations
istio-token:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 43200
istiod-ca-cert:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-ca-root-cert
Optional: false
wasmfilters-dir:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: flow-adapters-dev-envoy-filters
Optional: false
app-vault-secrets:
Type: CSI (a Container Storage Interface (CSI) volume source)
Driver: secrets-store.csi.k8s.io
FSType:
ReadOnly: true
VolumeAttributes: secretProviderClass=pc-flow-app-secret-provider
QoS Class: Burstable
Node-Selectors: workload.topology.app.farm/zone=rumsk1
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
workload.topology.app.farm/zone:NoSchedule op=Exists
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 9m32s default-scheduler Successfully assigned isys-flow-adapters-dev/pc-flow-757f958cc9-25cfj to afs1app-wl-163
Normal Pulled 9m32s kubelet spec.initContainers{istio-init}: Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
Normal Created 9m32s kubelet spec.initContainers{istio-init}: Created container istio-init
Normal Started 9m31s kubelet spec.containers{istio-proxy}: Started container istio-proxy
Normal Pulled 9m31s kubelet spec.containers{istio-proxy}: Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
Normal Created 9m31s kubelet spec.containers{istio-proxy}: Created container istio-proxy
Normal Started 9m31s kubelet spec.initContainers{istio-init}: Started container istio-init
Normal Pulled 9m24s kubelet spec.containers{app}: Successfully pulled image "registry.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow:master" in 50.959986ms
Normal Pulling 9m (x2 over 9m24s) kubelet spec.containers{app}: Pulling image "registry.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow:master"
Normal Created 8m59s (x2 over 9m24s) kubelet spec.containers{app}: Created container app
Normal Started 8m59s (x2 over 9m24s) kubelet spec.containers{app}: Started container app
Normal Pulled 8m59s kubelet spec.containers{app}: Successfully pulled image "registry.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/pc-flow:master" in 51.120846ms
Warning Unhealthy 8m38s (x9 over 9m18s) kubelet spec.containers{app}: Startup probe failed: HTTP probe failed with statuscode: 500
Warning BackOff 4m31s (x21 over 8m33s) kubelet spec.containers{app}: Back-off restarting failed container
Normal SecretRotationComplete 111s (x4 over 7m51s) csi-secrets-store-rotation successfully rotated K8s secret pc-flow-app-secret-env
dmitriev-aal@VDI-Dmitriev-A:~$
