https://pastein.ru/t/neT
Загрузка данных
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl --context rcsdstbl -n isys-flow-adapters-stress get pods -l app=nt-flow -o wide
Opening in existing browser session.
libva error: vaGetDriverNameByIndex() failed with unknown libva error, driver_name = (null)
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
nt-flow-795f84bd58-6x59n 2/2 Running 0 3d22h 100.79.136.122 afs1asd-wl-308 <none> <none>
nt-flow-795f84bd58-99ltt 2/2 Running 0 3d22h 100.79.139.157 afs1asd-wl-294 <none> <none>
nt-flow-795f84bd58-jgtfx 2/2 Running 0 3d22h 100.79.131.136 afs1asd-wl-296 <none> <none>
nt-flow-795f84bd58-mznx4 2/2 Running 0 3d22h 100.79.135.222 afs1asd-wl-304 <none> <none>
nt-flow-795f84bd58-nx29s 2/2 Running 0 3d22h 100.79.137.203 afs1asd-wl-295 <none> <none>
nt-flow-795f84bd58-zkxg5 2/2 Running 0 3d22h 100.79.134.97 afs1asd-wl-298 <none> <none>
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl --context rcsdstbl -n isys-flow-adapters-stress describe pod nt-flow-795f84bd58-6x59n
Name: nt-flow-795f84bd58-6x59n
Namespace: isys-flow-adapters-stress
Priority: 0
Priority Class Name: rumsk1
Service Account: default
Node: afs1asd-wl-308/10.21.182.252
Start Time: Thu, 30 Jul 2026 14:03:30 +0300
Labels: app=nt-flow
chart=base-1.15.3
fullname=nt-flow
heritage=Helm
isys=flow-adapters-stress
pod-template-hash=795f84bd58
psvc=nt-flow
release=nt-flow
security.istio.io/tlsMode=istio
service.istio.io/canonical-name=nt-flow
service.istio.io/canonical-revision=stress
version=stress
workload.topology.app.farm/zone=rumsk1
Annotations: checksum/configMapsEnv: f2c82d2a594cba8c16a1c360429ed86a4bdde8b08d4ed502c7827de49be7e487
checksum/secretEnv: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
ci/commithash: dfeec503
cni.projectcalico.org/containerID: ed69ccf25cc7ce0dd93761baff6683438a104c1f9da88f16550319606f6d7100
cni.projectcalico.org/podIP: 100.79.136.122/32
cni.projectcalico.org/podIPs: 100.79.136.122/32
inject.istio.io/templates: sidecar,custom
kubectl.kubernetes.io/default-container: app
kubectl.kubernetes.io/default-logs-container: app
production.platform.ckpr.integrations.rshbintech.ru/workloadquota-reservation-id:
a6f2b14ceed55ca8bd93194d6a94a040ac93a530914909f3d1d621c601a6276a
prometheus.io/path: /stats/prometheus
prometheus.io/port: 15020
prometheus.io/scrape: true
sidecar.istio.io/proxyCPU: 10m
sidecar.istio.io/proxyCPULimit: 700m
sidecar.istio.io/proxyMemory: 40Mi
sidecar.istio.io/proxyMemoryLimit: 480Mi
sidecar.istio.io/status:
{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-certs","workload-socket","credential-socket","workload-cer...
sidecar.istio.io/userVolume: [{"name": "wasmfilters-dir","configMap": {"name": "flow-adapters-stress-envoy-filters"}}]
sidecar.istio.io/userVolumeMount: [{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]
Status: Running
IP: 100.79.136.122
IPs:
IP: 100.79.136.122
Controlled By: ReplicaSet/nt-flow-795f84bd58
Init Containers:
istio-init:
Container ID: containerd://1c63bca0bea4602eff225feecb0c7dc5fc76725a9cf1f76786e469f308ca8670
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: <none>
Host Port: <none>
Args:
istio-iptables
-p
15001
-z
15006
-u
1337
-m
REDIRECT
-i
*
-x
-b
*
-d
15090,15021,15020
--log_output_level=default:info
State: Terminated
Reason: Completed
Exit Code: 0
Started: Thu, 30 Jul 2026 14:03:32 +0300
Finished: Thu, 30 Jul 2026 14:03:32 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 700m
memory: 480Mi
Requests:
cpu: 10m
memory: 40Mi
Environment: <none>
Mounts: <none>
Containers:
istio-proxy:
Container ID: containerd://2e172528e2b725848209421af8853568bced9da7f1ba98a8b40217281cdd4c00
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: 15090/TCP (http-envoy-prom)
Host Port: 0/TCP (http-envoy-prom)
Args:
proxy
sidecar
--domain
$(POD_NAMESPACE).svc.cluster.local
--proxyLogLevel=warning
--proxyComponentLogLevel=misc:error
--log_output_level=default:info
--concurrency
2
State: Running
Started: Thu, 30 Jul 2026 14:03:33 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 700m
memory: 480Mi
Requests:
cpu: 10m
memory: 40Mi
Readiness: http-get http://:15021/healthz/ready delay=1s timeout=3s period=2s #success=1 #failure=30
Environment:
HTTP_LOG_FORWARDER_HOST: (v1:spec.nodeName)
HTTP_LOG_FORWARDER_PORT: 9000
HTTP_LOG_FORWARDER_ENDPOINT: /
OUTPUT_CERTS: /etc/istio-certs/
ISYS_NAME: (v1:metadata.labels['isys'])
PSVC_NAME: (v1:metadata.labels['psvc'])
WORKLOAD_ZONE_NAME: (v1:metadata.labels['workload.topology.app.farm/zone'])
JWT_POLICY: third-party-jwt
PILOT_CERT_PROVIDER: istiod
CA_ADDR: istiod.istio-system.svc:15012
POD_NAME: nt-flow-795f84bd58-6x59n (v1:metadata.name)
POD_NAMESPACE: isys-flow-adapters-stress (v1:metadata.namespace)
INSTANCE_IP: (v1:status.podIP)
SERVICE_ACCOUNT: (v1:spec.serviceAccountName)
HOST_IP: (v1:status.hostIP)
PROXY_CONFIG: {"tracing":{"zipkin":{"address":"jaeger-collector.istio-system:9411"},"customTags":{"workload.topology.app.farm/zone":{"environment":{"name":"WORKLOAD_ZONE_NAME"}}},"sampling":100}}
ISTIO_META_POD_PORTS: [
]
ISTIO_META_APP_CONTAINERS: app
ISTIO_META_CLUSTER_ID: Kubernetes
ISTIO_META_INTERCEPTION_MODE: REDIRECT
ISTIO_META_WORKLOAD_NAME: nt-flow
ISTIO_META_OWNER: kubernetes://apis/apps/v1/namespaces/isys-flow-adapters-stress/deployments/nt-flow
ISTIO_META_MESH_ID: cluster.local
TRUST_DOMAIN: cluster.local
ISTIO_PROMETHEUS_ANNOTATIONS: {"scrape":"true","path":"/metrics","port":"8080"}
ISTIO_KUBE_APP_PROBERS: {"/app-health/app/livez":{"httpGet":{"path":"/health/liveness","port":8080,"scheme":"HTTP"},"timeoutSeconds":3},"/app-health/app/readyz":{"httpGet":{"path":"/health/readiness","port":8080,"scheme":"HTTP"},"timeoutSeconds":3},"/app-health/app/startupz":{"httpGet":{"path":"/health/liveness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1}}
Mounts:
/etc/istio-certs/ from istio-certs (rw)
/etc/istio/pod from istio-podinfo (rw)
/etc/istio/proxy from istio-envoy (rw)
/var/lib/istio/data from istio-data (rw)
/var/local/lib/wasm-filters from wasmfilters-dir (rw)
/var/run/secrets/credential-uds from credential-socket (rw)
/var/run/secrets/istio from istiod-ca-cert (rw)
/var/run/secrets/tokens from istio-token (rw)
/var/run/secrets/workload-spiffe-credentials from workload-certs (rw)
/var/run/secrets/workload-spiffe-uds from workload-socket (rw)
app:
Container ID: containerd://26897ceb26bd479b5e5265693819cd8083ff5c082c738b81cc1f437e6d26da33
Image: registry.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/nt-flow:stress
Image ID: registry.rshbdev.ru/rshbintech/integrations/cki/ip2-services/flow-adapters/nt-flow@sha256:a476a052616d8e89f2fcc38d3ce1db58beb072f04e99166ca65ab7ca29c970af
Port: <none>
Host Port: <none>
State: Running
Started: Thu, 30 Jul 2026 14:03:36 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 600m
memory: 768Mi
Requests:
cpu: 600m
memory: 768Mi
Liveness: http-get http://:15020/app-health/app/livez delay=30s timeout=3s period=5s #success=1 #failure=5
Readiness: http-get http://:15020/app-health/app/readyz delay=30s timeout=3s period=5s #success=1 #failure=3
Startup: http-get http://:15020/app-health/app/startupz delay=0s timeout=1s period=5s #success=1 #failure=60
Environment Variables from:
nt-flow-app-cm-env ConfigMap Optional: false
Environment: <none>
Mounts: <none>
Conditions:
Type Status
Initialized True
Ready True
ContainersReady True
PodScheduled True
Volumes:
istio-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
workload-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
credential-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
workload-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-envoy:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
istio-data:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-podinfo:
Type: DownwardAPI (a volume populated by information about the pod)
Items:
metadata.labels -> labels
metadata.annotations -> annotations
istio-token:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 43200
istiod-ca-cert:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-ca-root-cert
Optional: false
wasmfilters-dir:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: flow-adapters-stress-envoy-filters
Optional: false
QoS Class: Burstable
Node-Selectors: node-role.kubernetes.io/wload=
workload.topology.app.farm/zone=rumsk1
Tolerations: node-role.kubernetes.io/wload:NoSchedule op=Exists
node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
workload.topology.app.farm/zone:NoSchedule op=Exists
Events: <none>
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl --context rcsdstbl -n isys-flow-adapters-stress exec -it nt-flow-795f84bd58-6x59n -- sh
$ curl -v http://10.21.35.48:8094
* Trying 10.21.35.48:8094...
* Connected to 10.21.35.48 (10.21.35.48) port 8094 (#0)
> GET / HTTP/1.1
> Host: 10.21.35.48:8094
> User-Agent: curl/7.81.0
> Accept: */*
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 404 Not Found
< Content-Length: 50
< Content-Type: text/html
<
* Connection #0 to host 10.21.35.48 left intact
<h1>404 Not Found</h1>No context found for request$ nc -vz 10.21.35.48 8094
sh: 2: nc: not found
$ exit
command terminated with exit code 127
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl -n isys-flow-adapters-stress logs nt-flow-795f84bd58-6x59n -c istio-proxy
Opening in existing browser session.
libva error: vaGetDriverNameByIndex() failed with unknown libva error, driver_name = (null)
Error from server (Forbidden): pods "nt-flow-795f84bd58-6x59n" is forbidden: User "https://auth.rshbdev.ru/auth/realms/kubernetes#dmitriev-aal@rshbintech.ru" cannot get resource "pods" in API group "" in the namespace "isys-flow-adapters-stress"
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl --context rcsdstbl -n isys-flow-adapters-stress get serviceentry
No resources found in isys-flow-adapters-stress namespace.
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$ kubectl --context rcsdstbl -n isys-flow-adapters-stress get destinationrule
No resources found in isys-flow-adapters-stress namespace.
dmitriev-aal@VDI-Dmitriev-A:~/Desktop$
