https://pastein.ru/t/hc0
Загрузка данных
Running with gitlab-runner 15.8.0 (12335144)
on gitlab-runner-gitlab-runner-695bb55d66-shwwf y_Hs9d7d, system ID: r_unkj9zgbP7CT
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.18 ...
Using attach strategy to execute scripts...
Preparing environment
00:05
Waiting for pod gitlab-runners/runner-yhs9d7d-project-56455-concurrent-0hr96q to be running, status is Pending
Waiting for pod gitlab-runners/runner-yhs9d7d-project-56455-concurrent-0hr96q to be running, status is Pending
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-yhs9d7d-project-56455-concurrent-0hr96q via gitlab-runner-gitlab-runner-695bb55d66-shwwf...
Getting source from Git repository
00:02
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/it-invest/brokerage-service/sinv/oms/.git/
Created fresh repository.
Checking out a4b3b24a as 6.904.0-RC2...
Skipping Git submodules setup
Downloading artifacts
00:04
Downloading artifacts for init_dojo (24774152)...
Downloading artifacts from coordinator... ok id=24774152 responseStatus=200 OK token=64_DiCYz
Downloading artifacts for secrets_gitleaks (24774154)...
Downloading artifacts from coordinator... ok id=24774154 responseStatus=200 OK token=64_DiCYz
Downloading artifacts for devsecops_antivirus_scan (24774153)...
Downloading artifacts from coordinator... ok id=24774153 responseStatus=200 OK token=64_DiCYz
Downloading artifacts for build (24774161)...
Downloading artifacts from coordinator... ok id=24774161 responseStatus=200 OK token=64_DiCYz
Downloading artifacts for sca_scan (24774159)...
Downloading artifacts from coordinator... ok id=24774159 responseStatus=200 OK token=64_DiCYz
Downloading artifacts for sast_semgrep (24774155)...
Downloading artifacts from coordinator... ok id=24774155 responseStatus=200 OK token=64_DiCYz
Downloading artifacts for sast_ptai (24774156)...
Downloading artifacts from coordinator... ok id=24774156 responseStatus=200 OK token=64_DiCYz
Downloading artifacts for unit (24774163)...
Downloading artifacts from coordinator... ok id=24774163 responseStatus=200 OK token=64_DiCYz
Downloading artifacts for bca_trivy (24774166)...
Downloading artifacts from coordinator... ok id=24774166 responseStatus=200 OK token=64_DiCYz
Downloading artifacts for dockerfilegen (24774157)...
Downloading artifacts from coordinator... ok id=24774157 responseStatus=200 OK token=64_DiCYz
Executing "step_script" stage of the job script
00:33
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: rcsdstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=rcsdstbl
++ CLUSTER=rcsdstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ rc = production ]]
++ export NAMESPACE=isys-sinv-int-rc
++ NAMESPACE=isys-sinv-int-rc
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context rcsdstbl -n isys-sinv-int-rc history oms
+++ tail -1
+++ cut -f1,3
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ failed =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"
++ helmfile --environment rcsdstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms/-/pipelines/3558574 --set additionalWorkloadAnnotations.gitlabCommit=a4b3b24a24d63cc5dfab643e174ecb52edbb6f0a
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/it-invest/brokerage-service/sinv/oms
no matches for path: envs/rc/rcsdstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=vault-secrets-oms, chart=rshb-charts/raw
Comparing release=psvc-oms, chart=rshb-charts/raw
isys-sinv-int-rc, oms, PlatformService (production.platform.ckpr.integrations.rshbintech.ru) has changed:
# Source: raw/templates/resources.yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: PlatformService
metadata:
annotations:
ci.build.image.app.farm/version: 10.0.202-alpine3.23-amd64-rshb.2.5.0
ci.runtime.image.app.farm/version: 10.0.7-alpine3.23-amd64-rshb.2.3.0
labels:
app: raw
chart: raw-0.2.3-rshb.1.0.0
ci.build.image.app.farm/name: dotnet-sdk-latest
ci.kubeclientapps.app.farm/version: 8.21.18
ci.runtime.image.app.farm/name: dotnet-runtime-latest
ci.service.app.farm/lang: dotnet
ci.service.app.farm/side: backend
commitShortSHA: a4b3b24a
heritage: Helm
release: psvc-oms
- version: 6.904.0-RC1
+ version: 6.904.0-RC2
name: oms
spec:
cpuLimits: 200m
cpuRequests: 200m
description: Сервис учета заказов и заявок
environment: RC
informationSystemId: sinv-int-rc
istioSidecarSettings:
limits:
cpu: 100m
memory: 512Mi
requests:
cpu: 100m
memory: 512Mi
managementPort: 9080
name: Сервис учета заказов и заявок
projectPath: /rshbintech/it-invest/brokerage-service/sinv/oms
publicDomain: oms
ramLimits: 512Mi
ramRequests: 512Mi
replicaCount: 1
serviceReference:
name: oms
namespace: isys-sinv-int-rc
side: backend
updateStrategy: Recreate
Comparing release=platform-database-oms, chart=rshb-charts/raw
Comparing release=oms-grafana-dashboard, chart=rshb-charts/grafana-dashboards
Comparing release=links-oms, chart=rshb-charts/raw
Comparing release=oms, chart=rshb-charts/base
isys-sinv-int-rc, oms, Deployment (apps) has changed:
# Source: base/templates/workload.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: oms
labels:
app: oms
fullname: oms
- chart: base-1.14.2
+ chart: base-1.15.3
release: oms
heritage: Helm
isys: "sinv-int-rc"
psvc: "oms"
- version: "6.703.4-RC1"
+ version: "6.904.0-RC2"
workload.topology.app.farm/zone: "rumsk1"
annotations:
- platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 2fea1c4d
- platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3357317"
+ gitlabCommit: a4b3b24a24d63cc5dfab643e174ecb52edbb6f0a
+ gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms/-/pipelines/3558574
+ platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: a4b3b24a
+ platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3558574"
spec:
strategy:
type: Recreate
replicas: 1
selector:
matchLabels:
app: oms
fullname: oms
release: oms
template:
metadata:
labels:
app: oms
fullname: oms
- chart: base-1.14.2
+ chart: base-1.15.3
release: oms
heritage: Helm
isys: "sinv-int-rc"
psvc: "oms"
- version: "6.703.4-RC1"
+ version: "6.904.0-RC2"
workload.topology.app.farm/zone: "rumsk1"
annotations:
- checksum/configMapsEnv: "a104d02a8dadb540d7823a7a9880c70c8ef8b021fee78253640ff513aaef7557"
- checksum/secretEnv: "d0d4d45074cafaddf7bad5ea81bbce3a04e24544fc5a9c57994e86ebf332f271"
+ checksum/configMapsEnv: "ebddf6c565f0ef0679d5d60957460c274c19a17375dd02319297989ad0855638"
+ checksum/secretEnv: "4e98083b8e1e3b428b831cf3bb920a55e460525b045a888edc442ec84920b061"
inject.istio.io/templates: "sidecar,custom"
prometheus.io/path: "/metrics"
prometheus.io/port: "9080"
prometheus.io/scrape: "true"
sidecar.istio.io/proxyCPU: "100m"
sidecar.istio.io/proxyCPULimit: "100m"
sidecar.istio.io/proxyMemory: "512Mi"
sidecar.istio.io/proxyMemoryLimit: "512Mi"
sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"sinv-int-rc-envoy-filters\"}}]"
sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
spec:
+ automountServiceAccountToken: false
serviceAccountName: default
nodeSelector:
workload.topology.app.farm/zone: rumsk1
- priorityClassName:
- rumsk1
+ priorityClassName: rumsk1
containers:
- name: app
- image: registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.703.4-RC1
+ image: registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.904.0-RC2
imagePullPolicy: IfNotPresent
envFrom:
- configMapRef:
name: oms-app-cm-env
- secretRef:
name: oms-app-secret-env
resources:
limits:
cpu: 200m
memory: 512Mi
requests:
cpu: 200m
memory: 512Mi
ports:
startupProbe:
failureThreshold: 10
httpGet:
path: /health/liveness
port: 9080
periodSeconds: 20
successThreshold: 1
timeoutSeconds: 1
livenessProbe:
failureThreshold: 5
httpGet:
path: /health/liveness
port: 9080
initialDelaySeconds: 0
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
readinessProbe:
failureThreshold: 3
httpGet:
path: /health/readiness
port: 9080
initialDelaySeconds: 15
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
+ volumeMounts:
+ - name: app-vault-secrets
+ mountPath: /secrets
+ readOnly: true
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
procMount: Default
readOnlyRootFilesystem: false
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
securityContext:
fsGroup: 1001
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
tolerations:
- effect: NoSchedule
key: workload.topology.app.farm/zone
operator: Exists
hostNetwork: false
volumes:
+ - name: app-vault-secrets
+ csi:
+ driver: secrets-store.csi.k8s.io
+ readOnly: true
+ volumeAttributes:
+ secretProviderClass: oms-app-secret-provider
isys-sinv-int-rc, oms, Service (v1) has changed:
# Source: base/templates/svc.yaml
apiVersion: v1
kind: Service
metadata:
name: oms
labels:
app: oms
fullname: oms
- chart: base-1.14.2
+ chart: base-1.15.3
release: oms
heritage: Helm
isys: "sinv-int-rc"
psvc: "oms"
- version: "6.703.4-RC1"
+ version: "6.904.0-RC2"
spec:
ports:
- name: management
port: 9080
protocol: TCP
targetPort: 9080
- name: web
port: 80
protocol: TCP
targetPort: 8080
selector:
app: oms
fullname: oms
release: oms
type: ClusterIP
isys-sinv-int-rc, oms-app-cm-env, ConfigMap (v1) has changed:
# Source: base/templates/cm-env.yaml
apiVersion: v1
kind: ConfigMap
metadata:
name: oms-app-cm-env
labels:
app: oms
fullname: oms
- chart: base-1.14.2
+ chart: base-1.15.3
release: oms
heritage: Helm
isys: "sinv-int-rc"
psvc: "oms"
- version: "6.703.4-RC1"
+ version: "6.904.0-RC2"
workload.topology.app.farm/zone: "rumsk1"
data:
ASPNETCORE_ENVIRONMENT: "RC"
AppFarmKafkaBootstrapServers: "adapter-sinv-int-sinv-int-1.isys-sinv-int-rc-links:9092"
+ BookValueTradeEventOutboxItemExpirationInSecs: "30"
CancelOrderOutboxItemExpirationInSecs: "30"
GrpcClients__QuikFixAdapter: "http://10.21.21.83:11390"
GrpcClients__Quotes: "http://quotes.isys-sinv-int-rc:80"
GrpcPort: "8080"
HttpPort: "9080"
LogLevel: "Information"
- MockOrderConfiguration__IsEnable: "true"
- MockOrderConfiguration__LimitPrice: "100"
- MockOrderConfiguration__SecurityClassCode: "TQBR"
- MockOrderConfiguration__SecurityCode: "UTAR"
PostgreSqlHost: "10.21.21.35"
PostgreSqlName: "Broker_rc"
PostgreSqlPort: "5432"
- QuikFix__Consumers__ErrorMessageConsumer__BootstrapServers: "10.21.97.11:9092,10.21.97.12:9092,10.21.97.13:9092"
- QuikFix__Consumers__ErrorMessageConsumer__Topic: "sinv.oms.quikfix-reject-order"
- QuikFix__Consumers__OrderCancelRejectMessageConsumer__BootstrapServers: "10.21.97.11:9092,10.21.97.12:9092,10.21.97.13:9092"
- QuikFix__Consumers__OrderCancelRejectMessageConsumer__Topic: "sinv.oms.quikfix-reject-order-cancellation"
SubmitOrderOutboxItemExpirationInSecs: "30"
isys-sinv-int-rc, oms-app-secret-env, Secret (v1) has changed:
+ Changes suppressed on sensitive content of type Secret
isys-sinv-int-rc, oms-app-secret-provider, SecretProviderClass (secrets-store.csi.x-k8s.io) has been added:
-
+ # Source: base/templates/secret-provider.yaml
+ apiVersion: secrets-store.csi.x-k8s.io/v1
+ kind: SecretProviderClass
+ metadata:
+ name: oms-app-secret-provider
+ labels:
+ app: oms
+ fullname: oms
+ chart: base-1.15.3
+ release: oms
+ heritage: Helm
+ isys: "sinv-int-rc"
+ psvc: "oms"
+ version: "6.904.0-RC2"
+ workload.topology.app.farm/zone: "rumsk1"
+ spec:
+ provider: vault
+ parameters:
+ vaultKubernetesMountPath: rcsdstbl-secrets-store
+ roleName: "csi-secrets-reader-rc"
+ objects: |
+ - objectName: JwtSecret
+ secretPath: manual_kv_rc/data/rshbintech/it-invest/brokerage-service/sinv/oms
+ secretKey: JwtSecret
+ - objectName: PostgreSqlPassword
+ secretPath: manual_kv_rc/data/rshbintech/it-invest/brokerage-service/sinv/oms
+ secretKey: PostgreSqlPassword
+ - objectName: PostgreSqlUser
+ secretPath: manual_kv_rc/data/rshbintech/it-invest/brokerage-service/sinv/oms
+ secretKey: PostgreSqlUser
+ secretObjects:
+ - secretName: oms-app-secret-env
+ type: Opaque
+ labels:
+ app: oms
+ fullname: oms
+ chart: base-1.15.3
+ release: oms
+ heritage: Helm
+ isys: "sinv-int-rc"
+ psvc: "oms"
+ version: "6.904.0-RC2"
+ workload.topology.app.farm/zone: "rumsk1"
+ data:
+ - objectName: JwtSecret
+ key: JwtSecret
+ - objectName: PostgreSqlPassword
+ key: PostgreSqlPassword
+ - objectName: PostgreSqlUser
+ key: PostgreSqlUser
Listing releases matching ^pjob-oms$
Listing releases matching ^exsvc-oms$
Listing releases matching ^data-oms$
Listing releases matching ^assets-config-oms$
Listing releases matching ^oms-raw$
Listing releases matching ^oms-prometheus-rules$
Listing releases matching ^oms-rumsk1$
Listing releases matching ^oms-rumsk2$
Upgrading release=psvc-oms, chart=rshb-charts/raw
FAILED RELEASES:
NAME
psvc-oms
in deploy/helmfile.yaml: failed processing release psvc-oms: command "/usr/local/link/helm" exited with non-zero status:
PATH:
/usr/local/link/helm
ARGS:
0: helm (4 bytes)
1: --kube-context (14 bytes)
2: rcsdstbl (8 bytes)
3: upgrade (7 bytes)
4: --install (9 bytes)
5: --reset-values (14 bytes)
6: psvc-oms (8 bytes)
7: rshb-charts/raw (15 bytes)
8: --version (9 bytes)
9: 0.2.3-rshb.1.0.0 (16 bytes)
10: --wait (6 bytes)
11: --timeout (9 bytes)
12: 600s (4 bytes)
13: --atomic (8 bytes)
14: --kube-context (14 bytes)
15: rcsdstbl (8 bytes)
16: --namespace (11 bytes)
17: isys-sinv-int-rc (16 bytes)
18: --values (8 bytes)
19: /tmp/helmfile314910465/isys-sinv-int-rc-psvc-oms-values-c695db849 (65 bytes)
20: --values (8 bytes)
21: /tmp/helmfile1219050392/isys-sinv-int-rc-psvc-oms-values-65f949ddc4 (67 bytes)
22: --set (5 bytes)
23: additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms/-/pipelines/3558574 (138 bytes)
24: --set (5 bytes)
25: additionalWorkloadAnnotations.gitlabCommit=a4b3b24a24d63cc5dfab643e174ecb52edbb6f0a (83 bytes)
26: --history-max (13 bytes)
27: 10 (2 bytes)
ERROR:
exit status 1
EXIT STATUS
1
STDERR:
Error: UPGRADE FAILED: an error occurred while rolling back the release. original upgrade error: cannot patch "oms" with kind PlatformService: Internal error occurred: failed calling webhook "platformservice.platform.ckpr.integrations.rshbintech.ru": failed to call webhook: Post "https://platform-operator.platform.svc:443/validate-production-platform-ckpr-integrations-rshbintech-ru-v1-platformservice?timeout=10s": dial tcp 100.79.0.193:443: connect: connection refused: cannot patch "oms" with kind PlatformService: Internal error occurred: failed calling webhook "platformservice.platform.ckpr.integrations.rshbintech.ru": failed to call webhook: Post "https://platform-operator.platform.svc:443/validate-production-platform-ckpr-integrations-rshbintech-ru-v1-platformservice?timeout=10s": dial tcp 100.79.0.193:443: connect: connection refused
COMBINED OUTPUT:
Error: UPGRADE FAILED: an error occurred while rolling back the release. original upgrade error: cannot patch "oms" with kind PlatformService: Internal error occurred: failed calling webhook "platformservice.platform.ckpr.integrations.rshbintech.ru": failed to call webhook: Post "https://platform-operator.platform.svc:443/validate-production-platform-ckpr-integrations-rshbintech-ru-v1-platformservice?timeout=10s": dial tcp 100.79.0.193:443: connect: connection refused: cannot patch "oms" with kind PlatformService: Internal error occurred: failed calling webhook "platformservice.platform.ckpr.integrations.rshbintech.ru": failed to call webhook: Post "https://platform-operator.platform.svc:443/validate-production-platform-ckpr-integrations-rshbintech-ru-v1-platformservice?timeout=10s": dial tcp 100.79.0.193:443: connect: connection refused
Uploading artifacts for failed job
00:01
Uploading artifacts...
deploy.env: found 1 matching artifact files and directories
Uploading artifacts as "dotenv" to coordinator... 201 Created id=24774168 responseStatus=201 Created token=64_DiCYz
Cleaning up project directory and file based variables
00:00
ERROR: Job failed: command terminated with exit code 1
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl get pods | grep oms
oms-869fb99c47-8vgwv 1/2 CrashLoopBackOff 13 (100s ago) 45m
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl get events
LAST SEEN TYPE REASON OBJECT MESSAGE
29s Normal SecretRotationComplete pod/accountrefill-57fb66c75-wmjxv successfully rotated K8s secret accountrefill-app-secret-env
78m Warning Unhealthy pod/accountrefill-57fb66c75-wmjxv Liveness probe failed: Get "http://100.79.135.28:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
88s Normal SecretRotationComplete pod/accreditation-84d5f78d48-tn8gq successfully rotated K8s secret accreditation-app-secret-env
2m42s Warning Unhealthy pod/accreditation-84d5f78d48-tn8gq Liveness probe failed: Get "http://100.79.144.110:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
2m42s Warning Unhealthy pod/accreditation-84d5f78d48-tn8gq Readiness probe failed: Get "http://100.79.144.110:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
40m Normal KEDAScalersStarted scaledobject/accreditation Started scalers watch
4m15s Normal SecretRotationComplete pod/assignment-registry-65f88f464b-cjjlw successfully rotated K8s secret assignment-registry-app-secret-env
39s Normal SecretRotationComplete pod/assignment-registry-65f88f464b-w5m4t successfully rotated K8s secret assignment-registry-app-secret-env
2m43s Normal SecretRotationComplete pod/authorization-9f7df6b75-967dr successfully rotated K8s secret authorization-app-secret-env
40m Normal KEDAScalersStarted scaledobject/broker-admin Started scalers watch
116s Normal SecretRotationComplete pod/clientinfo-6547cc587d-fk4hp successfully rotated K8s secret clientinfo-app-secret-env
40m Normal KEDAScalersStarted scaledobject/clientinfo Started scalers watch
35m Normal KEDAScalersStarted scaledobject/clientinfo Started scalers watch
2m28s Normal SecretRotationComplete pod/clientinfocache-75bf774ff4-l65l5 successfully rotated K8s secret clientinfocache-app-secret-env
2m16s Warning Unhealthy pod/clientinfocache-75bf774ff4-l65l5 Liveness probe failed: Get "http://100.79.134.195:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
2m16s Warning Unhealthy pod/clientinfocache-75bf774ff4-l65l5 Readiness probe failed: Get "http://100.79.134.195:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
40m Normal KEDAScalersStarted scaledobject/clientinfocache Started scalers watch
35m Normal KEDAScalersStarted scaledobject/clientinfocache Started scalers watch
39m Normal KEDAScalersStarted scaledobject/cs-accreditation Started scalers watch
24m Warning Unhealthy pod/cs-chartonline-5f946f48d4-g4g98 Readiness probe failed: Get "http://100.79.151.125:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
24m Warning Unhealthy pod/cs-chartonline-5f946f48d4-g4g98 Liveness probe failed: Get "http://100.79.151.125:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
52s Normal SecretRotationComplete pod/cs-infoguide-c7d6d64d9-tlzzg successfully rotated K8s secret cs-infoguide-app-secret-env
101m Warning Unhealthy pod/cs-infoguide-c7d6d64d9-tlzzg Startup probe failed: HTTP probe failed with statuscode: 500
100m Warning Unhealthy pod/cs-infoguide-c7d6d64d9-tlzzg Startup probe failed: Get "http://100.79.204.12:15020/app-health/app/startupz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
12m Warning Unhealthy pod/cs-infoguide-c7d6d64d9-tlzzg Liveness probe failed: Get "http://100.79.204.12:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
12m Warning Unhealthy pod/cs-infoguide-c7d6d64d9-tlzzg Readiness probe failed: Get "http://100.79.204.12:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
40m Normal KEDAScalersStarted scaledobject/cs-infoguide Started scalers watch
69s Normal SecretRotationComplete pod/cs-instrumentinfo-77cc656dcf-2rzmk successfully rotated K8s secret cs-instrumentinfo-app-secret-env
39m Normal KEDAScalersStarted scaledobject/cs-instrumentinfo Started scalers watch
5m9s Normal SecretRotationComplete pod/cs-notificationaggregator-dffc8b5b8-p8j6w successfully rotated K8s secret cs-notificationaggregator-app-secret-env
35m Warning Unhealthy pod/cs-notificationaggregator-dffc8b5b8-p8j6w Liveness probe failed: Get "http://100.79.140.82:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
35m Warning Unhealthy pod/cs-notificationaggregator-dffc8b5b8-p8j6w Readiness probe failed: Get "http://100.79.140.82:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
71m Warning Unhealthy pod/cs-notificationaggregator-dffc8b5b8-p8j6w Liveness probe failed: HTTP probe failed with statuscode: 500
5m9s Normal SecretRotationComplete pod/cs-notificationhistory-6f6dd4c5bb-sgkgg successfully rotated K8s secret cs-notificationhistory-app-secret-env
35m Normal KEDAScalersStarted scaledobject/cs-notificationhistory Started scalers watch
41m Normal KEDAScalersStarted scaledobject/cs-obfeeder Started scalers watch
4m52s Normal SecretRotationComplete pod/cs-onboarding-85b988b644-2dxcn successfully rotated K8s secret cs-onboarding-app-secret-env
10m Warning Unhealthy pod/cs-onboarding-85b988b644-2dxcn Liveness probe failed: Get "http://100.79.210.29:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
10m Warning Unhealthy pod/cs-onboarding-85b988b644-2dxcn Readiness probe failed: Get "http://100.79.210.29:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
38m Normal KEDAScalersStarted scaledobject/cs-onboarding Started scalers watch
4m31s Normal SecretRotationComplete pod/cs-quotes-658f66cfd6-qqfgh successfully rotated K8s secret cs-quotes-app-secret-env
40m Normal KEDAScalersStarted scaledobject/cs-quotes Started scalers watch
15m Warning Unhealthy pod/cs-reporting-54c954f656-m59x7 Liveness probe failed: Get "http://100.79.153.230:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
15m Warning Unhealthy pod/cs-reporting-54c954f656-m59x7 Readiness probe failed: Get "http://100.79.153.230:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
41m Normal KEDAScalersStarted scaledobject/cs-reporting Started scalers watch
39m Normal KEDAScalersStarted scaledobject/cs-reporting Started scalers watch
54s Normal SecretRotationComplete pod/cs-trading-84c9ff76d7-2j9s4 successfully rotated K8s secret cs-trading-app-secret-env
42m Normal MountRotationComplete pod/cs-trading-84c9ff76d7-2j9s4 successfully rotated mounted contents for spc isys-sinv-int-rc/cs-trading-app-secret-provider
40m Normal KEDAScalersStarted scaledobject/cs-trading Started scalers watch
4m28s Normal SecretRotationComplete pod/cs-tradinghistory-54d8cbd564-g89n4 successfully rotated K8s secret cs-tradinghistory-app-secret-env
35m Warning Unhealthy pod/cs-tradinghistory-54d8cbd564-g89n4 Readiness probe failed: Get "http://100.79.130.71:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
35m Warning Unhealthy pod/cs-tradinghistory-54d8cbd564-g89n4 Liveness probe failed: Get "http://100.79.130.71:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
40m Normal KEDAScalersStarted scaledobject/cs-tradinghistory Started scalers watch
24s Normal SecretRotationComplete pod/cs-transfer-7b7647f898-rqzmp successfully rotated K8s secret cs-transfer-app-secret-env
92m Warning Unhealthy pod/cs-transfer-7b7647f898-rqzmp Liveness probe failed: Get "http://100.79.152.49:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
92m Warning Unhealthy pod/cs-transfer-7b7647f898-rqzmp Readiness probe failed: Get "http://100.79.152.49:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
40m Normal KEDAScalersStarted scaledobject/cs-transfer Started scalers watch
35m Normal KEDAScalersStarted scaledobject/cs-transfer Started scalers watch
25m Normal Pulled pod/dboportfolio-648bc9b6cc-ckx86 Container image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/dboportfolio:5.303.0-RC1" already present on machine
55s Warning BackOff pod/dboportfolio-648bc9b6cc-ckx86 Back-off restarting failed container
39m Normal KEDAScalersStarted scaledobject/dboportfolio Started scalers watch
4m53s Normal SecretRotationComplete pod/dictionarymanagement-5b46dc874-42p4j successfully rotated K8s secret dictionarymanagement-app-secret-env
40m Normal KEDAScalersStarted scaledobject/dictionarymanagement Started scalers watch
40m Normal KEDAScalersStarted scaledobject/gateway Started scalers watch
35m Normal KEDAScalersStarted scaledobject/gateway Started scalers watch
18s Normal SecretRotationComplete pod/identity-c6786555b-6bss8 successfully rotated K8s secret identity-app-secret-env
40m Normal KEDAScalersStarted scaledobject/identity Started scalers watch
5m43s Normal SecretRotationComplete pod/nontrade-85c8866d9b-v8czd successfully rotated K8s secret nontrade-app-secret-env
45m Normal KEDAScalersStarted scaledobject/nontrade Started scalers watch
40m Normal KEDAScalersStarted scaledobject/nontrade Started scalers watch
35m Normal KEDAScalersStarted scaledobject/nontrade Started scalers watch
2m28s Normal SecretRotationComplete pod/notificationsender-7b5f89d65d-gktx2 successfully rotated K8s secret notificationsender-app-secret-env
55m Normal Scheduled pod/oms-58fdc4976-kslsz Successfully assigned isys-sinv-int-rc/oms-58fdc4976-kslsz to afs1asd-wl-238
55m Normal Pulled pod/oms-58fdc4976-kslsz Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
55m Normal Created pod/oms-58fdc4976-kslsz Created container istio-init
55m Normal Started pod/oms-58fdc4976-kslsz Started container istio-init
55m Normal Pulled pod/oms-58fdc4976-kslsz Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
55m Normal Created pod/oms-58fdc4976-kslsz Created container istio-proxy
55m Normal Started pod/oms-58fdc4976-kslsz Started container istio-proxy
55m Normal Pulling pod/oms-58fdc4976-kslsz Pulling image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.904.0-RC1"
55m Normal Pulled pod/oms-58fdc4976-kslsz Successfully pulled image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.904.0-RC1" in 3.530857718s
54m Normal Created pod/oms-58fdc4976-kslsz Created container app
54m Normal Started pod/oms-58fdc4976-kslsz Started container app
54m Normal Pulled pod/oms-58fdc4976-kslsz Container image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.904.0-RC1" already present on machine
55m Warning Unhealthy pod/oms-58fdc4976-kslsz Startup probe failed: HTTP probe failed with statuscode: 500
50m Warning BackOff pod/oms-58fdc4976-kslsz Back-off restarting failed container
46m Normal SecretRotationComplete pod/oms-58fdc4976-kslsz successfully rotated K8s secret oms-app-secret-env
55m Normal SuccessfulCreate replicaset/oms-58fdc4976 Created pod: oms-58fdc4976-kslsz
46m Normal SuccessfulDelete replicaset/oms-58fdc4976 Deleted pod: oms-58fdc4976-kslsz
46m Normal Scheduled pod/oms-869fb99c47-8vgwv Successfully assigned isys-sinv-int-rc/oms-869fb99c47-8vgwv to afs1asd-wl-227
45m Normal Pulled pod/oms-869fb99c47-8vgwv Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
45m Normal Created pod/oms-869fb99c47-8vgwv Created container istio-init
45m Normal Started pod/oms-869fb99c47-8vgwv Started container istio-init
45m Normal Pulled pod/oms-869fb99c47-8vgwv Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
45m Normal Created pod/oms-869fb99c47-8vgwv Created container istio-proxy
45m Normal Started pod/oms-869fb99c47-8vgwv Started container istio-proxy
45m Normal Pulling pod/oms-869fb99c47-8vgwv Pulling image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.703.4-RC1"
45m Normal Pulled pod/oms-869fb99c47-8vgwv Successfully pulled image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.703.4-RC1" in 4.56626073s
44m Normal Created pod/oms-869fb99c47-8vgwv Created container app
44m Normal Started pod/oms-869fb99c47-8vgwv Started container app
44m Warning Unhealthy pod/oms-869fb99c47-8vgwv Startup probe failed: HTTP probe failed with statuscode: 500
44m Normal Pulled pod/oms-869fb99c47-8vgwv Container image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.703.4-RC1" already present on machine
57s Warning BackOff pod/oms-869fb99c47-8vgwv Back-off restarting failed container
65m Normal Pulled pod/oms-869fb99c47-fdbdv Container image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.703.4-RC1" already present on machine
60m Warning BackOff pod/oms-869fb99c47-fdbdv Back-off restarting failed container
55m Normal SuccessfulDelete replicaset/oms-869fb99c47 Deleted pod: oms-869fb99c47-fdbdv
46m Normal SuccessfulCreate replicaset/oms-869fb99c47 Created pod: oms-869fb99c47-8vgwv
55m Normal ScalingReplicaSet deployment/oms Scaled down replica set oms-869fb99c47 to 0
55m Normal ScalingReplicaSet deployment/oms Scaled up replica set oms-58fdc4976 to 1
46m Normal ScalingReplicaSet deployment/oms Scaled down replica set oms-58fdc4976 to 0
46m Normal ScalingReplicaSet deployment/oms Scaled up replica set oms-869fb99c47 to 1
38m Normal KEDAScalersStarted scaledobject/oms Started scalers watch
92m Warning Unhealthy pod/otcloader-5b5f5c975c-dmcw9 Liveness probe failed: HTTP probe failed with statuscode: 500
12m Warning Unhealthy pod/otcloader-5b5f5c975c-dmcw9 Liveness probe failed: Get "http://100.79.140.68:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
45s Warning Unhealthy pod/otcloader-5b5f5c975c-dmcw9 Readiness probe failed: Get "http://100.79.140.68:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
4m37s Normal SecretRotationComplete pod/portfolio-8fc44cc64-mpphk successfully rotated K8s secret portfolio-app-secret-env
19s Warning Unhealthy pod/portfolio-8fc44cc64-mpphk Liveness probe failed: Get "http://100.79.148.73:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
19s Warning Unhealthy pod/portfolio-8fc44cc64-mpphk Readiness probe failed: Get "http://100.79.148.73:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
35m Normal KEDAScalersStarted scaledobject/portfolio Started scalers watch
40m Normal KEDAScalersStarted scaledobject/pwa Started scalers watch
35m Normal KEDAScalersStarted scaledobject/pwa Started scalers watch
3m11s Normal SecretRotationComplete pod/qa-service-7778bf55f5-ztztk successfully rotated K8s secret qa-service-app-secret-env
3m8s Normal SecretRotationComplete pod/qa-service-db-84f45d98fd-rd8v9 successfully rotated K8s secret qa-service-db-app-secret-env
42m Normal MountRotationComplete pod/qa-service-db-84f45d98fd-rd8v9 successfully rotated mounted contents for spc isys-sinv-int-rc/qa-service-db-app-secret-provider
40m Normal KEDAScalersStarted scaledobject/qa-service-db Started scalers watch
45m Normal KEDAScalersStarted scaledobject/qa-service Started scalers watch
40m Normal KEDAScalersStarted scaledobject/qa-service Started scalers watch
35m Normal KEDAScalersStarted scaledobject/qa-service Started scalers watch
3m10s Normal SecretRotationComplete pod/quikposerviceadapter-56f9466c6c-hcp5b successfully rotated K8s secret quikposerviceadapter-app-secret-env
58m Warning Unhealthy pod/quikposerviceadapter-56f9466c6c-hcp5b Readiness probe failed: Get "http://100.79.137.241:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
58m Warning Unhealthy pod/quikposerviceadapter-56f9466c6c-hcp5b Liveness probe failed: Get "http://100.79.137.241:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
37s Normal SecretRotationComplete pod/quikposerviceadapter-56f9466c6c-k4mrb successfully rotated K8s secret quikposerviceadapter-app-secret-env
4m59s Warning Unhealthy pod/quikposerviceadapter-56f9466c6c-k4mrb Liveness probe failed: Get "http://100.79.157.145:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
39s Warning Unhealthy pod/quikposerviceadapter-56f9466c6c-k4mrb Readiness probe failed: Get "http://100.79.157.145:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
40m Normal KEDAScalersStarted scaledobject/quikposerviceadapter Started scalers watch
38m Normal KEDAScalersStarted scaledobject/quikposerviceadapter Started scalers watch
35m Normal KEDAScalersStarted scaledobject/quikposerviceadapter Started scalers watch
106s Normal SecretRotationComplete pod/quotes-5c5576dbff-wvb89 successfully rotated K8s secret quotes-app-secret-env
3m54s Warning Unhealthy pod/quotes-5c5576dbff-wvb89 Readiness probe failed: Get "http://100.79.128.8:15021/healthz/ready": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
54m Warning Unhealthy pod/quotes-5c5576dbff-wvb89 Readiness probe failed: Get "http://100.79.128.8:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
64m Warning Unhealthy pod/quotes-5c5576dbff-wvb89 Liveness probe failed: Get "http://100.79.128.8:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
40m Normal KEDAScalersStarted scaledobject/quotes Started scalers watch
40m Normal KEDAScalersStarted scaledobject/riskprofiling Started scalers watch
68s Normal SecretRotationComplete pod/trader-86864d97c5-zbqjd successfully rotated K8s secret trader-app-secret-env
40m Normal KEDAScalersStarted scaledobject/trader Started scalers watch
51s Normal SecretRotationComplete pod/transfer-58497c7d8c-qzz6f successfully rotated K8s secret transfer-app-secret-env
24m Warning Unhealthy pod/transfer-58497c7d8c-qzz6f Liveness probe failed: Get "http://100.79.156.171:15020/app-health/app/livez": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
24m Warning Unhealthy pod/transfer-58497c7d8c-qzz6f Readiness probe failed: Get "http://100.79.156.171:15020/app-health/app/readyz": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
40m Normal KEDAScalersStarted scaledobject/transfer Started scalers watch
35m Normal KEDAScalersStarted scaledobject/transfer Started scalers watch
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl describe pod oms-869fb99c47-8vgwv
Name: oms-869fb99c47-8vgwv
Namespace: isys-sinv-int-rc
Priority: 0
Priority Class Name: rumsk1
Service Account: default
Node: afs1asd-wl-227/10.21.182.170
Start Time: Thu, 17 Sep 2026 16:26:38 +0300
Labels: app=oms
chart=base-1.14.2
fullname=oms
heritage=Helm
isys=sinv-int-rc
pod-template-hash=869fb99c47
psvc=oms
release=oms
security.istio.io/tlsMode=istio
service.istio.io/canonical-name=oms
service.istio.io/canonical-revision=6.703.4-RC1
version=6.703.4-RC1
workload.topology.app.farm/zone=rumsk1
Annotations: checksum/configMapsEnv: a104d02a8dadb540d7823a7a9880c70c8ef8b021fee78253640ff513aaef7557
checksum/secretEnv: d0d4d45074cafaddf7bad5ea81bbce3a04e24544fc5a9c57994e86ebf332f271
cni.projectcalico.org/containerID: 5e0d81c7d374f0f7b646b1dd5a1d78d2215f14c37c0f2d954efab35cda0ea458
cni.projectcalico.org/podIP: 100.79.215.134/32
cni.projectcalico.org/podIPs: 100.79.215.134/32
inject.istio.io/templates: sidecar,custom
kubectl.kubernetes.io/default-container: app
kubectl.kubernetes.io/default-logs-container: app
kubectl.kubernetes.io/restartedAt: 2025-09-10T01:34:15+03:00
prometheus.io/path: /stats/prometheus
prometheus.io/port: 15020
prometheus.io/scrape: true
sidecar.istio.io/proxyCPU: 100m
sidecar.istio.io/proxyCPULimit: 100m
sidecar.istio.io/proxyMemory: 512Mi
sidecar.istio.io/proxyMemoryLimit: 512Mi
sidecar.istio.io/status:
{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-certs","workload-socket","credential-socket","workload-cer...
sidecar.istio.io/userVolume: [{"name": "wasmfilters-dir","configMap": {"name": "sinv-int-rc-envoy-filters"}}]
sidecar.istio.io/userVolumeMount: [{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]
Status: Running
IP: 100.79.215.134
IPs:
IP: 100.79.215.134
Controlled By: ReplicaSet/oms-869fb99c47
Init Containers:
istio-init:
Container ID: containerd://1b71f71a826477856a9dce04d8637319c008edd3126cb6c1119563292d3e1643
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: <none>
Host Port: <none>
Args:
istio-iptables
-p
15001
-z
15006
-u
1337
-m
REDIRECT
-i
*
-x
-b
*
-d
15090,15021,15020
--log_output_level=default:info
State: Terminated
Reason: Completed
Exit Code: 0
Started: Thu, 17 Sep 2026 16:26:40 +0300
Finished: Thu, 17 Sep 2026 16:26:41 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 100m
memory: 512Mi
Requests:
cpu: 100m
memory: 512Mi
Environment: <none>
Mounts:
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-5kl5k (ro)
Containers:
istio-proxy:
Container ID: containerd://c6bba68eb72551d55897bfcbe0b47c45041fee518ee1a3c1d9322ea85a958a77
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: 15090/TCP (http-envoy-prom)
Host Port: 0/TCP (http-envoy-prom)
Args:
proxy
sidecar
--domain
$(POD_NAMESPACE).svc.cluster.local
--proxyLogLevel=warning
--proxyComponentLogLevel=misc:error
--log_output_level=default:info
--concurrency
2
State: Running
Started: Thu, 17 Sep 2026 16:26:42 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 100m
memory: 512Mi
Requests:
cpu: 100m
memory: 512Mi
Readiness: http-get http://:15021/healthz/ready delay=1s timeout=3s period=2s #success=1 #failure=30
Environment:
HTTP_LOG_FORWARDER_HOST: (v1:spec.nodeName)
HTTP_LOG_FORWARDER_PORT: 9000
HTTP_LOG_FORWARDER_ENDPOINT: /
OUTPUT_CERTS: /etc/istio-certs/
ISYS_NAME: (v1:metadata.labels['isys'])
PSVC_NAME: (v1:metadata.labels['psvc'])
WORKLOAD_ZONE_NAME: (v1:metadata.labels['workload.topology.app.farm/zone'])
JWT_POLICY: third-party-jwt
PILOT_CERT_PROVIDER: istiod
CA_ADDR: istiod.istio-system.svc:15012
POD_NAME: oms-869fb99c47-8vgwv (v1:metadata.name)
POD_NAMESPACE: isys-sinv-int-rc (v1:metadata.namespace)
INSTANCE_IP: (v1:status.podIP)
SERVICE_ACCOUNT: (v1:spec.serviceAccountName)
HOST_IP: (v1:status.hostIP)
PROXY_CONFIG: {"tracing":{"zipkin":{"address":"jaeger-collector.istio-system:9411"},"customTags":{"workload.topology.app.farm/zone":{"environment":{"name":"WORKLOAD_ZONE_NAME"}}},"sampling":100}}
ISTIO_META_POD_PORTS: [
]
ISTIO_META_APP_CONTAINERS: app
ISTIO_META_CLUSTER_ID: Kubernetes
ISTIO_META_INTERCEPTION_MODE: REDIRECT
ISTIO_META_WORKLOAD_NAME: oms
ISTIO_META_OWNER: kubernetes://apis/apps/v1/namespaces/isys-sinv-int-rc/deployments/oms
ISTIO_META_MESH_ID: cluster.local
TRUST_DOMAIN: cluster.local
ISTIO_PROMETHEUS_ANNOTATIONS: {"scrape":"true","path":"/metrics","port":"9080"}
ISTIO_KUBE_APP_PROBERS: {"/app-health/app/livez":{"httpGet":{"path":"/health/liveness","port":9080,"scheme":"HTTP"},"timeoutSeconds":1},"/app-health/app/readyz":{"httpGet":{"path":"/health/readiness","port":9080,"scheme":"HTTP"},"timeoutSeconds":1},"/app-health/app/startupz":{"httpGet":{"path":"/health/liveness","port":9080,"scheme":"HTTP"},"timeoutSeconds":1}}
Mounts:
/etc/istio-certs/ from istio-certs (rw)
/etc/istio/pod from istio-podinfo (rw)
/etc/istio/proxy from istio-envoy (rw)
/var/lib/istio/data from istio-data (rw)
/var/local/lib/wasm-filters from wasmfilters-dir (rw)
/var/run/secrets/credential-uds from credential-socket (rw)
/var/run/secrets/istio from istiod-ca-cert (rw)
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-5kl5k (ro)
/var/run/secrets/tokens from istio-token (rw)
/var/run/secrets/workload-spiffe-credentials from workload-certs (rw)
/var/run/secrets/workload-spiffe-uds from workload-socket (rw)
app:
Container ID: containerd://1dd5f175608679d9cf20c0975db272dd2c7e0b85ff8ad2568ecc58dbd6cdd34b
Image: registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.703.4-RC1
Image ID: registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms@sha256:9dedff2e09577d5bab0c9004bd5b8f403b2bb6afba19f48c84126ce6b370e6fd
Port: <none>
Host Port: <none>
State: Waiting
Reason: CrashLoopBackOff
Last State: Terminated
Reason: Error
Exit Code: 139
Started: Thu, 17 Sep 2026 17:10:44 +0300
Finished: Thu, 17 Sep 2026 17:10:52 +0300
Ready: False
Restart Count: 13
Limits:
cpu: 200m
memory: 512Mi
Requests:
cpu: 200m
memory: 512Mi
Liveness: http-get http://:15020/app-health/app/livez delay=0s timeout=1s period=5s #success=1 #failure=5
Readiness: http-get http://:15020/app-health/app/readyz delay=15s timeout=1s period=5s #success=1 #failure=3
Startup: http-get http://:15020/app-health/app/startupz delay=0s timeout=1s period=20s #success=1 #failure=10
Environment Variables from:
oms-app-cm-env ConfigMap Optional: false
oms-app-secret-env Secret Optional: false
Environment: <none>
Mounts:
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-5kl5k (ro)
Conditions:
Type Status
Initialized True
Ready False
ContainersReady False
PodScheduled True
Volumes:
istio-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
workload-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
credential-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
workload-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-envoy:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
istio-data:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-podinfo:
Type: DownwardAPI (a volume populated by information about the pod)
Items:
metadata.labels -> labels
metadata.annotations -> annotations
istio-token:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 43200
istiod-ca-cert:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-ca-root-cert
Optional: false
wasmfilters-dir:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: sinv-int-rc-envoy-filters
Optional: false
kube-api-access-5kl5k:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 3607
ConfigMapName: kube-root-ca.crt
Optional: false
DownwardAPI: true
QoS Class: Guaranteed
Node-Selectors: workload.topology.app.farm/zone=rumsk1
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
workload.topology.app.farm/zone:NoSchedule op=Exists
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 47m default-scheduler Successfully assigned isys-sinv-int-rc/oms-869fb99c47-8vgwv to afs1asd-wl-227
Normal Pulled 47m kubelet spec.initContainers{istio-init}: Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
Normal Created 47m kubelet spec.initContainers{istio-init}: Created container istio-init
Normal Started 47m kubelet spec.initContainers{istio-init}: Started container istio-init
Normal Pulled 47m kubelet spec.containers{istio-proxy}: Container image "registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0" already present on machine
Normal Created 47m kubelet spec.containers{istio-proxy}: Created container istio-proxy
Normal Started 47m kubelet spec.containers{istio-proxy}: Started container istio-proxy
Normal Pulling 47m kubelet spec.containers{app}: Pulling image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.703.4-RC1"
Normal Pulled 47m kubelet spec.containers{app}: Successfully pulled image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.703.4-RC1" in 4.56626073s
Normal Created 46m (x3 over 47m) kubelet spec.containers{app}: Created container app
Normal Started 46m (x3 over 47m) kubelet spec.containers{app}: Started container app
Warning Unhealthy 46m (x2 over 47m) kubelet spec.containers{app}: Startup probe failed: HTTP probe failed with statuscode: 500
Normal Pulled 45m (x3 over 47m) kubelet spec.containers{app}: Container image "registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/oms:6.703.4-RC1" already present on machine
Warning BackOff 2m47s (x222 over 46m) kubelet spec.containers{app}: Back-off restarting failed container
dmitriev-aal@VDI-Dmitriev-A:~$ 