https://pastein.ru/t/xnN
Загрузка данных
dmitriev-aal@VDI-Dmitriev-A:~$ kns isys-ndbo-dev
Set context namespace to "isys-ndbo-dev"
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl get pods | grep owb-ms-prd-brokerage
owb-ms-prd-brokerage-b4d45d7bc-cjx6z 0/2 Terminating 0 3d6h
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl logs owb-ms-prd-brokerage-b4d45d7bc-cjx6z
unable to retrieve container logs for containerd://93f348534d515114eb74cd9ea6831cec1a2a6da64e232b0d9f34243632c20b87dmitriev-aal@VDI-Dmitriev-A:~$ kubectl logs owb-ms-prd-brokerage-b4d45d7bc-cjx6z -c app
unable to retrieve container logs for containerd://93f348534d515114eb74cd9ea6831cec1a2a6da64e232b0d9f34243632c20b87dmitriev-aal@VDI-Dmitriev-A:~$ kubectl get events | grep owb-ms-prd-brokerage-b4d45d7bc-cjx6z
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl get pods | grep owb-ms-prd-brokerage
owb-ms-prd-brokerage-b4d45d7bc-cjx6z 0/2 Terminating 0 3d6h
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl describe pod | grep owb-ms-prd-brokerage-b4d45d7bc-cjx6z
Name: owb-ms-prd-brokerage-b4d45d7bc-cjx6z
POD_NAME: owb-ms-prd-brokerage-b4d45d7bc-cjx6z (v1:metadata.name)
^[[A^[[Admitriev-aal@VDI-Dmitriev-A:~$ kubectl describe pod owb-ms-prd-brokerage-b4d45d7bc-cjx6z
error: unknown command "kubectl" for "kubectl"
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl describe pod owb-ms-prd-brokerage-b4d45d7bc-cjx6z
Name: owb-ms-prd-brokerage-b4d45d7bc-cjx6z
Namespace: isys-ndbo-dev
Priority: 0
Priority Class Name: rumsk1
Service Account: default
Node: afs1app-wl-113/10.7.182.161
Start Time: Fri, 02 Oct 2026 12:06:32 +0300
Labels: app=owb-ms-prd-brokerage
chart=base-1.15.3
fullname=owb-ms-prd-brokerage
heritage=Helm
isys=ndbo-dev
pod-template-hash=b4d45d7bc
psvc=owb-ms-prd-brokerage
release=owb-ms-prd-brokerage
security.istio.io/tlsMode=istio
service.istio.io/canonical-name=owb-ms-prd-brokerage
service.istio.io/canonical-revision=master
version=master
workload.topology.app.farm/zone=rumsk1
Annotations: checksum/configMapsEnv: 30b85dd7d4df071372afb1dbdf5708cbee1aadbf39897e9292c3bb106f20a634
checksum/secretEnv: 64909dd58b3278f8709e9b889e93b4397f212d8f8f37181beb8915122e0eb811
ci/commithash: f06f7190
cni.projectcalico.org/containerID: f4ba2169eb3c74e1ff97f82dd60c59005fb57d04dbbcc49c3751b6a6177f9a7b
cni.projectcalico.org/podIP:
cni.projectcalico.org/podIPs:
inject.istio.io/templates: sidecar,custom
kubectl.kubernetes.io/default-container: app
kubectl.kubernetes.io/default-logs-container: app
kubectl.kubernetes.io/restartedAt: 2025-09-09T23:36:02+03:00
prometheus.io/path: /stats/prometheus
prometheus.io/port: 15020
prometheus.io/scrape: true
sidecar.istio.io/status:
{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-certs","workload-socket","credential-socket","workload-cer...
sidecar.istio.io/userVolume: [{"name": "wasmfilters-dir","configMap": {"name": "ndbo-dev-envoy-filters"}}]
sidecar.istio.io/userVolumeMount: [{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]
Status: Terminating (lasts 31h)
Termination Grace Period: 30s
IP:
IPs: <none>
Controlled By: ReplicaSet/owb-ms-prd-brokerage-b4d45d7bc
Init Containers:
istio-init:
Container ID: containerd://9a50555075a8dcc6dfaa90abce5690e277be71fe43dc73327d275d587bf4913e
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: <none>
Host Port: <none>
Args:
istio-iptables
-p
15001
-z
15006
-u
1337
-m
REDIRECT
-i
*
-x
-b
*
-d
15090,15021,15020
--log_output_level=default:info
State: Terminated
Reason: Completed
Exit Code: 0
Started: Fri, 02 Oct 2026 12:06:33 +0300
Finished: Fri, 02 Oct 2026 12:06:34 +0300
Ready: True
Restart Count: 0
Limits:
cpu: 400m
memory: 384Mi
Requests:
cpu: 10m
memory: 64Mi
Environment: <none>
Mounts: <none>
Containers:
istio-proxy:
Container ID: containerd://1114f405278aefa000bf1e092b68c7e0d0b79664682d24c373ac0a7dea581803
Image: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2:1.15.1-rshb.0.4.0
Image ID: registry.rshbdev.ru/appfarm/infra/images/istio/proxyv2@sha256:7b3ce834183d38c73388b93b9f2173957dba6da11f8bc17e8dfcd64415c41e4e
Port: 15090/TCP (http-envoy-prom)
Host Port: 0/TCP (http-envoy-prom)
Args:
proxy
sidecar
--domain
$(POD_NAMESPACE).svc.cluster.local
--proxyLogLevel=warning
--proxyComponentLogLevel=misc:error
--log_output_level=default:info
--concurrency
2
State: Terminated
Reason: Unknown
Exit Code: 255
Started: Fri, 02 Oct 2026 12:06:35 +0300
Finished: Sun, 04 Oct 2026 13:07:05 +0300
Ready: False
Restart Count: 0
Limits:
cpu: 400m
memory: 384Mi
Requests:
cpu: 10m
memory: 64Mi
Readiness: http-get http://:15021/healthz/ready delay=1s timeout=3s period=2s #success=1 #failure=30
Environment:
HTTP_LOG_FORWARDER_HOST: (v1:spec.nodeName)
HTTP_LOG_FORWARDER_PORT: 9000
HTTP_LOG_FORWARDER_ENDPOINT: /
OUTPUT_CERTS: /etc/istio-certs/
ISYS_NAME: (v1:metadata.labels['isys'])
PSVC_NAME: (v1:metadata.labels['psvc'])
WORKLOAD_ZONE_NAME: (v1:metadata.labels['workload.topology.app.farm/zone'])
JWT_POLICY: third-party-jwt
PILOT_CERT_PROVIDER: istiod
CA_ADDR: istiod.istio-system.svc:15012
POD_NAME: owb-ms-prd-brokerage-b4d45d7bc-cjx6z (v1:metadata.name)
POD_NAMESPACE: isys-ndbo-dev (v1:metadata.namespace)
INSTANCE_IP: (v1:status.podIP)
SERVICE_ACCOUNT: (v1:spec.serviceAccountName)
HOST_IP: (v1:status.hostIP)
PROXY_CONFIG: {"tracing":{"zipkin":{"address":"jaeger-collector.istio-system:9411"},"customTags":{"workload.topology.app.farm/zone":{"environment":{"name":"WORKLOAD_ZONE_NAME"}}},"sampling":100}}
ISTIO_META_POD_PORTS: [
]
ISTIO_META_APP_CONTAINERS: app
ISTIO_META_CLUSTER_ID: Kubernetes
ISTIO_META_INTERCEPTION_MODE: REDIRECT
ISTIO_META_WORKLOAD_NAME: owb-ms-prd-brokerage
ISTIO_META_OWNER: kubernetes://apis/apps/v1/namespaces/isys-ndbo-dev/deployments/owb-ms-prd-brokerage
ISTIO_META_MESH_ID: cluster.local
TRUST_DOMAIN: cluster.local
ISTIO_PROMETHEUS_ANNOTATIONS: {"scrape":"true","path":"/metrics","port":"8080"}
ISTIO_KUBE_APP_PROBERS: {"/app-health/app/livez":{"httpGet":{"path":"/health/liveness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1},"/app-health/app/readyz":{"httpGet":{"path":"/health/readiness","port":8080,"scheme":"HTTP"},"timeoutSeconds":1}}
Mounts:
/etc/istio-certs/ from istio-certs (rw)
/etc/istio/pod from istio-podinfo (rw)
/etc/istio/proxy from istio-envoy (rw)
/var/lib/istio/data from istio-data (rw)
/var/local/lib/wasm-filters from wasmfilters-dir (rw)
/var/run/secrets/credential-uds from credential-socket (rw)
/var/run/secrets/istio from istiod-ca-cert (rw)
/var/run/secrets/tokens from istio-token (rw)
/var/run/secrets/workload-spiffe-credentials from workload-certs (rw)
/var/run/secrets/workload-spiffe-uds from workload-socket (rw)
app:
Container ID: containerd://93f348534d515114eb74cd9ea6831cec1a2a6da64e232b0d9f34243632c20b87
Image: registry.rshbdev.ru/rshbintech/crft/dboul/ndbo/backend/owb-ms-prd-brokerage:master
Image ID: registry.rshbdev.ru/rshbintech/crft/dboul/ndbo/backend/owb-ms-prd-brokerage@sha256:5e754a9189dba8c0906d605a93925b2e74b48eadc3ad6bbc7611687eb6ff9d5f
Port: <none>
Host Port: <none>
State: Terminated
Reason: Unknown
Exit Code: 255
Started: Fri, 02 Oct 2026 12:06:41 +0300
Finished: Sun, 04 Oct 2026 13:07:05 +0300
Ready: False
Restart Count: 0
Limits:
cpu: 1
memory: 2Gi
Requests:
cpu: 200m
memory: 512Mi
Liveness: http-get http://:15020/app-health/app/livez delay=200s timeout=1s period=5s #success=1 #failure=5
Readiness: http-get http://:15020/app-health/app/readyz delay=200s timeout=1s period=5s #success=1 #failure=3
Environment Variables from:
owb-ms-prd-brokerage-app-cm-env ConfigMap Optional: false
owb-ms-prd-brokerage-app-secret-env Secret Optional: false
Environment: <none>
Mounts:
/secrets from app-vault-secrets (ro)
Conditions:
Type Status
Initialized True
Ready False
ContainersReady False
PodScheduled True
Volumes:
istio-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
workload-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
credential-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
workload-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-envoy:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
istio-data:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-podinfo:
Type: DownwardAPI (a volume populated by information about the pod)
Items:
metadata.labels -> labels
metadata.annotations -> annotations
istio-token:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 43200
istiod-ca-cert:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-ca-root-cert
Optional: false
wasmfilters-dir:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: ndbo-dev-envoy-filters
Optional: false
app-vault-secrets:
Type: CSI (a Container Storage Interface (CSI) volume source)
Driver: secrets-store.csi.k8s.io
FSType:
ReadOnly: true
VolumeAttributes: secretProviderClass=owb-ms-prd-brokerage-app-secret-provider
QoS Class: Burstable
Node-Selectors: workload.topology.app.farm/zone=rumsk1
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
workload.topology.app.farm/zone:NoSchedule op=Exists
Events: <none>
dmitriev-aal@VDI-Dmitriev-A:~$
Running with gitlab-runner 15.8.0 (12335144)
on gitlab-runner-gitlab-runner-6db78b8747-r2nrm Nu38qLut, system ID: r_ya4qsiIuFGKM
Preparing the "kubernetes" executor
00:00
Using Kubernetes namespace: gitlab-runners
Using Kubernetes executor with image registry.rshbdev.ru/appfarm/infra/images/kube-client-apps:8.21.18 ...
Using attach strategy to execute scripts...
Preparing environment
00:05
Waiting for pod gitlab-runners/runner-nu38qlut-project-57788-concurrent-0kxcmt to be running, status is Pending
Waiting for pod gitlab-runners/runner-nu38qlut-project-57788-concurrent-0kxcmt to be running, status is Pending
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-nu38qlut-project-57788-concurrent-0kxcmt via gitlab-runner-gitlab-runner-6db78b8747-r2nrm...
Getting source from Git repository
00:02
$ git config --global --add url."https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/".insteadOf "https://${CI_SERVER_HOST}" # collapsed multi-line command
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/rshbintech/crft/dboul/ndbo/backend/owb-ms-prd-brokerage/.git/
Created fresh repository.
Checking out 02a0be1c as master...
Skipping Git submodules setup
Downloading artifacts
00:01
Downloading artifacts for build (25215992)...
Downloading artifacts from coordinator... ok id=25215992 responseStatus=200 OK token=64_Bnzsp
Downloading artifacts for dockerfilegen (25215989)...
Downloading artifacts from coordinator... ok id=25215989 responseStatus=200 OK token=64_Bnzsp
Downloading artifacts for devsecops_antivirus_scan (25215985)...
Downloading artifacts from coordinator... ok id=25215985 responseStatus=200 OK token=64_Bnzsp
Downloading artifacts for unit (25215994)...
Downloading artifacts from coordinator... ok id=25215994 responseStatus=200 OK token=64_Bnzsp
Executing "step_script" stage of the job script
$ ( umask 0077; mkdir -p ~/.kube && echo "$KUBECONFIG_COMBINED" | base64 -d > ~/.kube/config )
$ if [[ ${IS_SENSITIVE_SYSTEM} = true ]]; then export K8S_CLUSTERS=$K8S_CLUSTERS_SENSITIVE; fi
$ echo 'IS_SENSITIVE_SYSTEM:' $IS_SENSITIVE_SYSTEM
IS_SENSITIVE_SYSTEM: true
$ echo 'TARGET_CLUSTERS:' $K8S_CLUSTERS
TARGET_CLUSTERS: devstbl
$ set -x
++ echo '$ for CLUSTER in $K8S_CLUSTERS; do'
$ for CLUSTER in $K8S_CLUSTERS; do
++ for CLUSTER in $K8S_CLUSTERS
++ echo '$ export CLUSTER=$CLUSTER'
$ export CLUSTER=$CLUSTER
++ export CLUSTER=devstbl
++ CLUSTER=devstbl
++ echo '$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi'
$ if [[ ${CI_ENVIRONMENT_SLUG} = production ]]; then export NAMESPACE=isys-${ISYS_NAME}; else export NAMESPACE=isys-${ISYS_NAME}-${CI_ENVIRONMENT_SLUG}; fi
++ [[ dev = production ]]
++ export NAMESPACE=isys-ndbo-dev
++ NAMESPACE=isys-ndbo-dev
++ echo '$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true'
$ read -r REVISION STATUS < <(helm --kube-context ${CLUSTER:-default} -n $NAMESPACE history $CI_PROJECT_NAME | tail -1 | cut -f1,3) || true
++ read -r REVISION STATUS
+++ helm --kube-context devstbl -n isys-ndbo-dev history owb-ms-prd-brokerage
+++ tail -1
+++ cut -f1,3
++ echo '$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi'
$ if [[ "$STATUS" =~ "pending" ]]; then helm --kube-context ${CLUSTER:-default} -n $NAMESPACE rollback $CI_PROJECT_NAME $REVISION || true; fi
++ [[ failed =~ pending ]]
++ echo '$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"'
$ helmfile ${HELMFILE_DEFAULT_NAMESPACE:+--namespace $HELMFILE_DEFAULT_NAMESPACE} --environment ${CLUSTER:-default} -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set "additionalWorkloadAnnotations.gitlabPipeline=${CI_PIPELINE_URL}" --set "additionalWorkloadAnnotations.gitlabCommit=${CI_COMMIT_SHA}"
++ helmfile --environment devstbl -f deploy/helmfile.yaml --log-level info apply --suppress-secrets --set additionalWorkloadAnnotations.gitlabPipeline=https://gitlab.rshbdev.ru/rshbintech/crft/dboul/ndbo/backend/owb-ms-prd-brokerage/-/pipelines/3622901 --set additionalWorkloadAnnotations.gitlabCommit=02a0be1cd2f57c8bf58dd98009488048e02758f6
== /usr/local/link/helmfile: Initialize base deploy hierarchy in /builds/rshbintech/crft/dboul/ndbo/backend/owb-ms-prd-brokerage
no matches for path: envs/dev/devstbl/helmfile.yaml.gotmpl
Adding repo rshb-charts https://nexus.rshbdev.ru/repository/charts/
"rshb-charts" has been added to your repositories
Comparing release=vault-secrets-owb-ms-prd-brokerage, chart=rshb-charts/raw
Comparing release=psvc-owb-ms-prd-brokerage, chart=rshb-charts/raw
isys-ndbo-dev, owb-ms-prd-brokerage, PlatformService (production.platform.ckpr.integrations.rshbintech.ru) has changed:
# Source: raw/templates/resources.yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: PlatformService
metadata:
annotations:
ci.build.image.app.farm/version: 3.9.12-eclipse-temurin-25-rshb.0.3.0
ci.runtime.image.app.farm/version: 25.0.1_8-jre-noble-rshb.1.1.0
labels:
app: raw
chart: raw-0.2.3-rshb.1.0.0
ci.build.image.app.farm/name: maven-latest
ci.kubeclientapps.app.farm/version: 8.21.18
ci.runtime.image.app.farm/name: jre-latest
ci.service.app.farm/lang: java
ci.service.app.farm/side: backend
- commitShortSHA: 3da03022
+ commitShortSHA: 02a0be1c
heritage: Helm
release: psvc-owb-ms-prd-brokerage
version: master
name: owb-ms-prd-brokerage
spec:
cpuLimits: 1000m
cpuRequests: 200m
description: МС Брокерское обслуживание
environment: DEV
informationSystemId: ndbo-dev
name: owb-ms-prd-brokerage
projectPath: /rshbintech/crft/dboul/ndbo/backend/owb-ms-prd-brokerage
publicDomain: owb-ms-prd-brokerage
publishAPI: true
ramLimits: 2Gi
ramRequests: 512Mi
replicaCount: 1
serviceReference:
name: owb-ms-prd-brokerage
namespace: isys-ndbo-dev
side: backend
updateStrategy: Recreate
Comparing release=platform-database-owb-ms-prd-brokerage, chart=rshb-charts/raw
Comparing release=owb-ms-prd-brokerage-grafana-dashboard, chart=rshb-charts/grafana-dashboards
Comparing release=links-owb-ms-prd-brokerage, chart=rshb-charts/raw
Comparing release=owb-ms-prd-brokerage, chart=rshb-charts/base
isys-ndbo-dev, owb-ms-prd-brokerage, Deployment (apps) has changed:
# Source: base/templates/workload.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: owb-ms-prd-brokerage
labels:
app: owb-ms-prd-brokerage
fullname: owb-ms-prd-brokerage
chart: base-1.15.3
release: owb-ms-prd-brokerage
heritage: Helm
isys: "ndbo-dev"
psvc: "owb-ms-prd-brokerage"
version: "master"
workload.topology.app.farm/zone: "rumsk1"
annotations:
- gitlabCommit: f06f7190c8e9916c6bb32c729d39e2a0e31feba3
- gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/crft/dboul/ndbo/backend/owb-ms-prd-brokerage/-/pipelines/3615477
- platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: f06f7190
- platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3615477"
+ gitlabCommit: 02a0be1cd2f57c8bf58dd98009488048e02758f6
+ gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/crft/dboul/ndbo/backend/owb-ms-prd-brokerage/-/pipelines/3622901
+ platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 02a0be1c
+ platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3622901"
spec:
strategy:
type: Recreate
replicas: 1
selector:
matchLabels:
app: owb-ms-prd-brokerage
fullname: owb-ms-prd-brokerage
release: owb-ms-prd-brokerage
template:
metadata:
labels:
app: owb-ms-prd-brokerage
fullname: owb-ms-prd-brokerage
chart: base-1.15.3
release: owb-ms-prd-brokerage
heritage: Helm
isys: "ndbo-dev"
psvc: "owb-ms-prd-brokerage"
version: "master"
workload.topology.app.farm/zone: "rumsk1"
annotations:
checksum/configMapsEnv: "30b85dd7d4df071372afb1dbdf5708cbee1aadbf39897e9292c3bb106f20a634"
checksum/secretEnv: "64909dd58b3278f8709e9b889e93b4397f212d8f8f37181beb8915122e0eb811"
- ci/commithash: "f06f7190"
+ ci/commithash: "02a0be1c"
inject.istio.io/templates: "sidecar,custom"
prometheus.io/path: "/metrics"
prometheus.io/port: "8080"
prometheus.io/scrape: "true"
sidecar.istio.io/userVolume: "[{\"name\": \"wasmfilters-dir\",\"configMap\": {\"name\": \"ndbo-dev-envoy-filters\"}}]"
sidecar.istio.io/userVolumeMount: "[{\"mountPath\":\"/var/local/lib/wasm-filters\",\"name\":\"wasmfilters-dir\"}]"
spec:
automountServiceAccountToken: false
serviceAccountName: default
nodeSelector:
workload.topology.app.farm/zone: rumsk1
priorityClassName: rumsk1
containers:
- name: app
image: registry.rshbdev.ru/rshbintech/crft/dboul/ndbo/backend/owb-ms-prd-brokerage:master
imagePullPolicy: Always
envFrom:
- configMapRef:
name: owb-ms-prd-brokerage-app-cm-env
- secretRef:
name: owb-ms-prd-brokerage-app-secret-env
resources:
limits:
cpu: 1000m
memory: 2Gi
requests:
cpu: 200m
memory: 512Mi
ports:
livenessProbe:
failureThreshold: 5
httpGet:
path: /health/liveness
port: 8080
initialDelaySeconds: 200
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
readinessProbe:
failureThreshold: 3
httpGet:
path: /health/readiness
port: 8080
initialDelaySeconds: 200
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
volumeMounts:
- name: app-vault-secrets
mountPath: /secrets
readOnly: true
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
procMount: Default
readOnlyRootFilesystem: false
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
securityContext:
fsGroup: 1001
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
tolerations:
- effect: NoSchedule
key: workload.topology.app.farm/zone
operator: Exists
hostNetwork: false
volumes:
- name: app-vault-secrets
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: owb-ms-prd-brokerage-app-secret-provider
Listing releases matching ^pjob-owb-ms-prd-brokerage$
Listing releases matching ^exsvc-owb-ms-prd-brokerage$
Listing releases matching ^data-owb-ms-prd-brokerage$
Listing releases matching ^assets-config-owb-ms-prd-brokerage$
Listing releases matching ^owb-ms-prd-brokerage-raw$
Listing releases matching ^owb-ms-prd-brokerage-prometheus-rules$
Listing releases matching ^owb-ms-prd-brokerage-rumsk1$
Listing releases matching ^owb-ms-prd-brokerage-rumsk2$
Upgrading release=psvc-owb-ms-prd-brokerage, chart=rshb-charts/raw
Release "psvc-owb-ms-prd-brokerage" has been upgraded. Happy Helming!
NAME: psvc-owb-ms-prd-brokerage
LAST DEPLOYED: Mon Oct 5 15:31:09 2026
NAMESPACE: isys-ndbo-dev
STATUS: deployed
REVISION: 433
TEST SUITE: None
Listing releases matching ^psvc-owb-ms-prd-brokerage$
psvc-owb-ms-prd-brokerage isys-ndbo-dev 433 2026-10-05 15:31:09.917721935 +0000 UTC deployed raw-0.2.3-rshb.1.0.0 0.2.3
Upgrading release=owb-ms-prd-brokerage, chart=rshb-charts/base
