https://pastein.ru/t/OsB
Загрузка данных
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-acrm-dev exec -it cdi-adapter-56dc867fb6-ffzlg -c app -- curl -v localhost:8080/health/readiness
* Trying 127.0.0.1:8080...
* connect to 127.0.0.1 port 8080 failed: Connection refused
* Trying ::1:8080...
* connect to ::1 port 8080 failed: Connection refused
* Failed to connect to localhost port 8080 after 0 ms: Connection refused
* Closing connection 0
curl: (7) Failed to connect to localhost port 8080 after 0 ms: Connection refused
command terminated with exit code 7
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-acrm-dev describe pod cdi-adapter-56dc867fb6-ffzlg
Name: cdi-adapter-56dc867fb6-ffzlg
Namespace: isys-acrm-dev
Priority: 0
Service Account: default
Node: afs1app-wl-161/10.7.184.38
Start Time: Tue, 16 Jun 2026 11:55:24 +0300
Labels: app=cdi-adapter
chart=base-1.15.2
fullname=cdi-adapter
heritage=Helm
isys=acrm-dev
pod-template-hash=56dc867fb6
psvc=cdi-adapter
release=cdi-adapter
security.istio.io/tlsMode=istio
service.istio.io/canonical-name=cdi-adapter
service.istio.io/canonical-revision=master
version=master
workload.topology.app.farm/zone=rumsk1
Annotations: checksum/configMapsEnv: 55666eb9cd6958b39a1486598665c7961a8e127b84550c70f352ec9ad3b88a14
checksum/secretEnv: 8c9a3b561567a7effaf14c878f4365fc5c0d00ede655e775b2aca369687b4c7a
ci/commithash: a6bb538f
cni.projectcalico.org/containerID: 075fa27fd3f58c41de3b672531d63cf818dfeacb7240817754d6b29466a94614
cni.projectcalico.org/podIP: 100.68.141.41/32
cni.projectcalico.org/podIPs: 100.68.141.41/32
inject.istio.io/templates: sidecar,custom
kubectl.kubernetes.io/default-container: app
kubectl.kubernetes.io/default-logs-container: app
prometheus.io/path: /stats/prometheus
prometheus.io/port: 15020
prometheus.io/scrape: true
sidecar.istio.io/status:
{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-certs","workload-socket","credential-socket","workload-cer...
sidecar.istio.io/userVolume: [{"name": "wasmfilters-dir","configMap": {"name": "acrm-dev-envoy-filters"}}]
sidecar.istio.io/userVolumeMount: [{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]
Status: Running
IP: 100.68.141.41
IPs:
IP: 100.68.141.41
Controlled By: ReplicaSet/cdi-adapter-56dc867fb6
Init Containers:
istio-init:
Container ID: containerd://3ebbc5c2599a5fa18d536cf94ff41169dd5318d74386f3ed9a9e64e5d4607cc1
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: <none>
Host Port: <none>
Args:
istio-iptables
-p
15001
-z
15006
-u
1337
-m
REDIRECT
-i
*
-x
-b
*
-d
15090,15021,15020
--log_output_level=default:info
State: Terminated
Reason: Completed
Exit Code: 0
Started: Tue, 16 Jun 2026 11:55:25 +0300
Finished: Tue, 16 Jun 2026 11:55:25 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 400m
memory: 384Mi
Requests:
cpu: 10m
memory: 64Mi
Environment: <none>
Mounts: <none>
Containers:
istio-proxy:
Container ID: containerd://2e68c71de6954a4cdc85e81645cdac390746279871677ff195b63336a1e400a6
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: 15090/TCP (http-envoy-prom)
Host Port: 0/TCP (http-envoy-prom)
Args:
proxy
sidecar
--domain
$(POD_NAMESPACE).svc.cluster.local
--proxyLogLevel=warning
--proxyComponentLogLevel=misc:error
--log_output_level=default:info
--concurrency
2
State: Running
Started: Tue, 16 Jun 2026 11:55:26 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 400m
memory: 384Mi
Requests:
cpu: 10m
memory: 64Mi
Readiness: http-get http://:15021/healthz/ready delay=1s timeout=3s period=2s #success=1 #failure=30
Environment:
HTTP_LOG_FORWARDER_HOST: (v1:spec.nodeName)
HTTP_LOG_FORWARDER_PORT: 9000
HTTP_LOG_FORWARDER_ENDPOINT: /
OUTPUT_CERTS: /etc/istio-certs/
ISYS_NAME: (v1:metadata.labels['isys'])
PSVC_NAME: (v1:metadata.labels['psvc'])
WORKLOAD_ZONE_NAME: (v1:metadata.labels['workload.topology.app.farm/zone'])
JWT_POLICY: third-party-jwt
PILOT_CERT_PROVIDER: istiod
CA_ADDR: istiod.istio-system.svc:15012
POD_NAME: cdi-adapter-56dc867fb6-ffzlg (v1:metadata.name)
POD_NAMESPACE: isys-acrm-dev (v1:metadata.namespace)
INSTANCE_IP: (v1:status.podIP)
SERVICE_ACCOUNT: (v1:spec.serviceAccountName)
HOST_IP: (v1:status.hostIP)
PROXY_CONFIG: {"tracing":{"zipkin":{"address":"jaeger-collector.istio-system:9411"},"customTags":{"workload.topology.app.farm/zone":{"environment":{"name":"WORKLOAD_ZONE_NAME"}}},"sampling":100}}
ISTIO_META_POD_PORTS: [
]
ISTIO_META_APP_CONTAINERS: app
ISTIO_META_CLUSTER_ID: Kubernetes
ISTIO_META_INTERCEPTION_MODE: REDIRECT
ISTIO_META_WORKLOAD_NAME: cdi-adapter
ISTIO_META_OWNER: kubernetes://apis/apps/v1/namespaces/isys-acrm-dev/deployments/cdi-adapter
ISTIO_META_MESH_ID: cluster.local
TRUST_DOMAIN: cluster.local
ISTIO_PROMETHEUS_ANNOTATIONS: {"scrape":"true","path":"/metrics","port":"8080"}
ISTIO_KUBE_APP_PROBERS: {"/app-health/app/livez":{"httpGet":{"path":"/health/readiness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1},"/app-health/app/readyz":{"httpGet":{"path":"/health/readiness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1}}
Mounts:
/etc/istio-certs/ from istio-certs (rw)
/etc/istio/pod from istio-podinfo (rw)
/etc/istio/proxy from istio-envoy (rw)
/var/lib/istio/data from istio-data (rw)
/var/local/lib/wasm-filters from wasmfilters-dir (rw)
/var/run/secrets/credential-uds from credential-socket (rw)
/var/run/secrets/istio from istiod-ca-cert (rw)
/var/run/secrets/tokens from istio-token (rw)
/var/run/secrets/workload-spiffe-credentials from workload-certs (rw)
/var/run/secrets/workload-spiffe-uds from workload-socket (rw)
app:
Container ID: containerd://80fa96c214e7ca9dc9bf3f71d852134455d2cc3e665e1d267703bdfff1795948
Image: registry.rshbdev.ru/rshbintech/analytics/ckrao/acrm/cdi-adapter:master
Image ID: registry.rshbdev.ru/rshbintech/analytics/ckrao/acrm/cdi-adapter@sha256:7b64ed1191ec2a7216820019cff93f7eb7af84cf7ce95dd3f4d98cab2b94a864
Port: <none>
Host Port: <none>
State: Running
Started: Tue, 16 Jun 2026 12:01:09 +0300
Last State: Terminated
Reason: Error
Exit Code: 143
Started: Tue, 16 Jun 2026 11:55:37 +0300
Finished: Tue, 16 Jun 2026 12:01:00 +0300
Ready: False
Restart Count: 1
Limits:
cpu: 512m
memory: 1Gi
Requests:
cpu: 250m
memory: 512Mi
Liveness: http-get http://:15020/app-health/app/livez delay=300s timeout=1s period=5s #success=1 #failure=5
Readiness: http-get http://:15020/app-health/app/readyz delay=300s timeout=1s period=5s #success=1 #failure=3
Environment Variables from:
cdi-adapter-app-cm-env ConfigMap Optional: false
cdi-adapter-app-secret-env Secret Optional: false
Environment: <none>
Mounts:
/secrets from app-vault-secrets (ro)
Conditions:
Type Status
Initialized True
Ready False
ContainersReady False
PodScheduled True
Volumes:
istio-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
workload-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
credential-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
workload-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-envoy:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
istio-data:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-podinfo:
Type: DownwardAPI (a volume populated by information about the pod)
Items:
metadata.labels -> labels
metadata.annotations -> annotations
istio-token:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 43200
istiod-ca-cert:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-ca-root-cert
Optional: false
wasmfilters-dir:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: acrm-dev-envoy-filters
Optional: false
app-vault-secrets:
Type: CSI (a Container Storage Interface (CSI) volume source)
Driver: secrets-store.csi.k8s.io
FSType:
ReadOnly: true
VolumeAttributes: secretProviderClass=cdi-adapter-app-secret-provider
QoS Class: Burstable
Node-Selectors: workload.topology.app.farm/zone=rumsk1
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
workload.topology.app.farm/zone:NoSchedule op=Exists
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 8m32s default-scheduler Successfully assigned isys-acrm-dev/cdi-adapter-56dc867fb6-ffzlg to afs1app-wl-161
Normal Pulled 8m32s kubelet spec.initContainers{istio-init}: Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
Normal Created 8m32s kubelet spec.initContainers{istio-init}: Created container istio-init
Normal Started 8m32s kubelet spec.initContainers{istio-init}: Started container istio-init
Normal Pulled 8m31s kubelet spec.containers{istio-proxy}: Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
Normal Created 8m31s kubelet spec.containers{istio-proxy}: Created container istio-proxy
Normal Started 8m31s kubelet spec.containers{istio-proxy}: Started container istio-proxy
Normal Pulled 8m20s kubelet spec.containers{app}: Successfully pulled image "registry.rshbdev.ru/rshbintech/analytics/ckrao/acrm/cdi-adapter:master" in 9.695986487s
Normal Started 8m20s kubelet spec.containers{app}: Started container app
Warning Unhealthy 2m58s (x5 over 3m18s) kubelet spec.containers{app}: Liveness probe failed: HTTP probe failed with statuscode: 500
Normal Killing 2m58s kubelet spec.containers{app}: Container app failed liveness probe, will be restarted
Normal Pulling 2m57s (x2 over 8m30s) kubelet spec.containers{app}: Pulling image "registry.rshbdev.ru/rshbintech/analytics/ckrao/acrm/cdi-adapter:master"
Warning Unhealthy 2m53s (x7 over 3m18s) kubelet spec.containers{app}: Readiness probe failed: HTTP probe failed with statuscode: 500
Normal Created 2m48s (x2 over 8m20s) kubelet spec.containers{app}: Created container app
Normal Pulled 2m48s kubelet spec.containers{app}: Successfully pulled image "registry.rshbdev.ru/rshbintech/analytics/ckrao/acrm/cdi-adapter:master" in 9.389133326s
Normal SecretRotationComplete 104s (x4 over 7m44s) csi-secrets-store-rotation successfully rotated K8s secret cdi-adapter-app-secret-env
