config-server stuck at setup #1669
Description
config-server stuck at setup where the logs showing down
logs:
kubectl -n config-server get pods
NAME READY STATUS RESTARTS AGE
config-server-6947d4b546-zx78c 1/2 Running 12 (2m4s ago) 68m
kubectl -n config-server describe pod config-server-6947d4b546-zx78c
Name: config-server-6947d4b546-zx78c
Namespace: config-server
Priority: 0
Service Account: config-server
Node: 172.16.110.43/172.16.110.43
Start Time: Tue, 28 Oct 2025 06:32:29 +0000
Labels: app.kubernetes.io/instance=config-server
app.kubernetes.io/name=config-server
pod-template-hash=6947d4b546
security.istio.io/tlsMode=istio
service.istio.io/canonical-name=config-server
service.istio.io/canonical-revision=latest
Annotations: cni.projectcalico.org/containerID: 3b0fb6bdaa3c4a19c6ff838b9e424b667a89e28bea67d9727c7437d8dd562d84
cni.projectcalico.org/podIP: 10.42.0.76/32
cni.projectcalico.org/podIPs: 10.42.0.76/32
kubectl.kubernetes.io/default-container: config-server
kubectl.kubernetes.io/default-logs-container: config-server
prometheus.io/path: /stats/prometheus
prometheus.io/port: 15020
prometheus.io/scrape: true
sidecar.istio.io/status:
{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["workload-socket","credential-socket","workload-certs","istio-env...
Status: Running
IP: 10.42.0.76
IPs:
IP: 10.42.0.76
Controlled By: ReplicaSet/config-server-6947d4b546
Init Containers:
istio-init:
Container ID: docker://f69350f7e2bc1786b24b6a48dff7c43a3277227c1a9f52f996eebfc878e28ae9
Image: docker.io/istio/proxyv2:1.15.0
Image ID: docker-pullable://istio/proxyv2@sha256:0201788b1550dd95cbf7d7075c939dd581169e715699d8e8f85ed2a5f6b35cd2
Port: <none>
Host Port: <none>
Args:
istio-iptables
-p
15001
-z
15006
-u
1337
-m
REDIRECT
-i
*
-x
-b
*
-d
15090,15021,15020
--log_output_level=default:info
State: Terminated
Reason: Completed
Exit Code: 0
Started: Tue, 28 Oct 2025 06:32:33 +0000
Finished: Tue, 28 Oct 2025 06:32:33 +0000
Ready: True
Restart Count: 0
Limits:
cpu: 2
memory: 1Gi
Requests:
cpu: 100m
memory: 128Mi
Environment:
ISTIO_META_IDLE_TIMEOUT: 0s
Mounts:
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-57g6m (ro)
Containers:
istio-proxy:
Container ID: docker://588cada85ef8e4ea2c31daef452260aa56f9ad203e576b836578530373a765d6
Image: docker.io/istio/proxyv2:1.15.0
Image ID: docker-pullable://istio/proxyv2@sha256:0201788b1550dd95cbf7d7075c939dd581169e715699d8e8f85ed2a5f6b35cd2
Port: 15090/TCP (http-envoy-prom)
Host Port: 0/TCP (http-envoy-prom)
Args:
proxy
sidecar
--domain
$(POD_NAMESPACE).svc.cluster.local
--proxyLogLevel=warning
--proxyComponentLogLevel=misc:error
--log_output_level=default:info
--concurrency
2
State: Running
Started: Tue, 28 Oct 2025 06:32:34 +0000
Ready: True
Restart Count: 0
Limits:
cpu: 2
memory: 1Gi
Requests:
cpu: 100m
memory: 128Mi
Readiness: http-get http://:15021/healthz/ready delay=1s timeout=3s period=2s #success=1 #failure=30
Environment:
JWT_POLICY: third-party-jwt
PILOT_CERT_PROVIDER: istiod
CA_ADDR: istiod.istio-system.svc:15012
POD_NAME: config-server-6947d4b546-zx78c (v1:metadata.name)
POD_NAMESPACE: config-server (v1:metadata.namespace)
INSTANCE_IP: (v1:status.podIP)
SERVICE_ACCOUNT: (v1:spec.serviceAccountName)
HOST_IP: (v1:status.hostIP)
PROXY_CONFIG: {"proxyMetadata":{"ISTIO_META_IDLE_TIMEOUT":"0s"},"gatewayTopology":{"numTrustedProxies":2},"holdApplicationUntilProxyStarts":true}
ISTIO_META_POD_PORTS: [
{"name":"http","containerPort":51000,"protocol":"TCP"}
]
ISTIO_META_APP_CONTAINERS: config-server
ISTIO_META_CLUSTER_ID: Kubernetes
ISTIO_META_INTERCEPTION_MODE: REDIRECT
ISTIO_META_WORKLOAD_NAME: config-server
ISTIO_META_OWNER: kubernetes://apis/apps/v1/namespaces/config-server/deployments/config-server
ISTIO_META_MESH_ID: cluster.local
TRUST_DOMAIN: cluster.local
ISTIO_META_IDLE_TIMEOUT: 0s
ISTIO_KUBE_APP_PROBERS: {"/app-health/config-server/livez":{"httpGet":{"path":"/config/*/*","port":51000,"scheme":"HTTP"},"timeoutSeconds":5},"/app-health/config-server/readyz":{"httpGet":{"path":"/config/*/*","port":51000,"scheme":"HTTP"},"timeoutSeconds":5},"/app-health/config-server/startupz":{"httpGet":{"path":"/config/*/*","port":51000,"scheme":"HTTP"},"timeoutSeconds":5}}
Mounts:
/etc/istio/pod from istio-podinfo (rw)
/etc/istio/proxy from istio-envoy (rw)
/var/lib/istio/data from istio-data (rw)
/var/run/secrets/credential-uds from credential-socket (rw)
/var/run/secrets/istio from istiod-ca-cert (rw)
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-57g6m (ro)
/var/run/secrets/tokens from istio-token (rw)
/var/run/secrets/workload-spiffe-credentials from workload-certs (rw)
/var/run/secrets/workload-spiffe-uds from workload-socket (rw)
config-server:
Container ID: docker://c8d8ee382553f0ae8e7e330d99a77114548ca54b65162b6aeae7a4fa41c53445
Image: mosipid/config-server:1.1.2
Image ID: docker-pullable://mosipid/config-server@sha256:bc5ce50037d8988f807db45ee0fb19a750f6d0b17487155fca7edad0892e7eb0
Port: 51000/TCP (http)
Host Port: 0/TCP (http)
State: Running
Started: Tue, 28 Oct 2025 07:38:30 +0000
Last State: Terminated
Reason: Error
Exit Code: 137
Started: Tue, 28 Oct 2025 07:33:02 +0000
Finished: Tue, 28 Oct 2025 07:38:30 +0000
Ready: False
Restart Count: 12
Limits:
cpu: 200m
memory: 1500Mi
Requests:
cpu: 50m
memory: 500Mi
Liveness: http-get http://:15020/app-health/config-server/livez delay=20s timeout=5s period=30s #success=1 #failure=6
Readiness: http-get http://:15020/app-health/config-server/readyz delay=0s timeout=5s period=10s #success=1 #failure=6
Startup: http-get http://:15020/app-health/config-server/startupz delay=0s timeout=5s period=10s #success=1 #failure=30
Environment Variables from:
config-server-env-vars ConfigMap Optional: false
Environment:
SPRING_CLOUD_CONFIG_SERVER_GIT_PASSWORD: <set to the key 'github-token' in secret 'config-server'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_API_PUBLIC_HOST: <set to the key 'mosip-api-host' of config map 'global'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_API_INTERNAL_HOST: <set to the key 'mosip-api-internal-host' of config map 'global'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_ADMIN_HOST: <set to the key 'mosip-admin-host' of config map 'global'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_PREREG_HOST: <set to the key 'mosip-prereg-host' of config map 'global'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_RESIDENT_HOST: <set to the key 'mosip-resident-host' of config map 'global'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_PMP_HOST: <set to the key 'mosip-pmp-host' of config map 'global'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_COMPLIANCE_HOST: <set to the key 'mosip-compliance-host' of config map 'global'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_ESIGNET_HOST: <set to the key 'mosip-esignet-host' of config map 'global'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_SIGNUP_HOST: <set to the key 'mosip-signup-host' of config map 'global'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_DB_DBUSER_PASSWORD: <set to the key 'db-dbuser-password' in secret 'db-common-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_KEYCLOAK_INTERNAL_URL: <set to the key 'keycloak-internal-url' of config map 'keycloak-host'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_KEYCLOAK_EXTERNAL_URL: <set to the key 'keycloak-external-url' of config map 'keycloak-host'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_KEYCLOAK_INTERNAL_HOST: <set to the key 'keycloak-internal-host' of config map 'keycloak-host'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_KEYCLOAK_EXTERNAL_HOST: <set to the key 'keycloak-external-host' of config map 'keycloak-host'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_ABIS_CLIENT_SECRET: <set to the key 'mosip_abis_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_SYNCDATA_CLIENT_SECRET: <set to the key 'mosip_syncdata_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_CRESER_IDPASS_CLIENT_SECRET: <set to the key 'mosip_creser_idpass_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MPARTNER_DEFAULT_AUTH_SECRET: <set to the key 'mpartner_default_auth_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_IDREPO_CLIENT_SECRET: <set to the key 'mosip_idrepo_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MPARTNER_DEFAULT_PRINT_SECRET: <set to the key 'mpartner_default_print_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MPARTNER_DEFAULT_DIGITALCARD_SECRET: <set to the key 'mpartner_default_digitalcard_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_ADMIN_CLIENT_SECRET: <set to the key 'mosip_admin_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_AUTH_CLIENT_SECRET: <set to the key 'mosip_auth_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_CREREQ_CLIENT_SECRET: <set to the key 'mosip_crereq_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_CRESER_CLIENT_SECRET: <set to the key 'mosip_creser_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_DATSHA_CLIENT_SECRET: <set to the key 'mosip_datsha_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_IDA_CLIENT_SECRET: <set to the key 'mosip_ida_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_MISP_CLIENT_SECRET: <set to the key 'mosip_misp_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_PMS_CLIENT_SECRET: <set to the key 'mosip_pms_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_POLICYMANAGER_CLIENT_SECRET: <set to the key 'mosip_policymanager_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_REG_CLIENT_SECRET: <set to the key 'mosip_reg_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_REGPROC_CLIENT_SECRET: <set to the key 'mosip_regproc_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_RESIDENT_CLIENT_SECRET: <set to the key 'mosip_resident_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_PREREG_CLIENT_SECRET: <set to the key 'mosip_prereg_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_HOTLIST_CLIENT_SECRET: <set to the key 'mosip_hotlist_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_DIGITALCARD_CLIENT_SECRET: <set to the key 'mosip_digitalcard_client_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_KEYCLOAK_ADMIN_PASSWORD: <set to the key 'admin-password' in secret 'keycloak'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SOFTHSM_KERNEL_SECURITY_PIN: <set to the key 'security-pin' in secret 'softhsm-kernel'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SOFTHSM_IDA_SECURITY_PIN: <set to the key 'security-pin' in secret 'softhsm-ida'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_ACTIVEMQ_HOST: <set to the key 'activemq-host' of config map 'activemq-activemq-artemis-share'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_ACTIVEMQ_CORE_PORT: <set to the key 'activemq-core-port' of config map 'activemq-activemq-artemis-share'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_ACTIVEMQ_PASSWORD: <set to the key 'artemis-password' in secret 'activemq-activemq-artemis'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_AUTHTYPE_CALLBACK_SECRET: <set to the key 'ida-websub-authtype-callback-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_CREDENTIAL_ISSUE_CALLBACK_SECRET: <set to the key 'ida-websub-credential-issue-callback-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_PARTNER_SERVICE_CALLBACK_SECRET: <set to the key 'ida-websub-partner-service-callback-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_CA_CERTIFICATE_CALLBACK_SECRET: <set to the key 'ida-websub-ca-certificate-callback-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_HOTLIST_CALLBACK_SECRET: <set to the key 'ida-websub-hotlist-callback-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_MASTERDATA_TEMPLATES_CALLBACK_SECRET: <set to the key 'ida-websub-masterdata-templates-callback-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDA_WEBSUB_MASTERDATA_TITLES_CALLBACK_SECRET: <set to the key 'ida-websub-masterdata-titles-callback-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_IDREPO_WEBSUB_VID_CREDENTIAL_UPDATE_SECRET: <set to the key 'idrepo-websub-vid-credential-update-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_RESIDENT_WEBSUB_CREDENTIAL_STATUS_UPDATE_SECRET: <set to the key 'resident-websub-credential-status-update-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_KERNEL_TOKENID_UIN_SALT: <set to the key 'mosip-kernel-tokenid-uin-salt' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_KERNEL_TOKENID_PARTNERCODE_SALT: <set to the key 'mosip-kernel-tokenid-partnercode-salt' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_PRINT_WEBSUB_HUB_SECRET: <set to the key 'print-websub-hub-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_HUB_SECRET_ENCRYPTION_KEY: <set to the key 'hub-secret-encryption-key' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_S3_ACCESSKEY: <set to the key 's3-user-key' of config map 's3'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_S3_REGION: <set to the key 's3-region' of config map 's3'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_S3_SECRETKEY: <set to the key 's3-user-secret' in secret 's3'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMTP_HOST: <set to the key 'smtp-host' of config map 'msg-gateway'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMS_HOST: <set to the key 'sms-host' of config map 'msg-gateway'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMTP_PORT: <set to the key 'smtp-port' of config map 'msg-gateway'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMS_PORT: <set to the key 'sms-port' of config map 'msg-gateway'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMTP_USERNAME: <set to the key 'smtp-username' of config map 'msg-gateway'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMS_USERNAME: <set to the key 'sms-username' of config map 'msg-gateway'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMTP_SECRET: <set to the key 'smtp-secret' in secret 'msg-gateway'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMS_SECRET: <set to the key 'sms-secret' in secret 'msg-gateway'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_SMS_AUTHKEY: <set to the key 'sms-authkey' in secret 'msg-gateway'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_PREREG_CAPTCHA_SITE_KEY: <set to the key 'prereg-captcha-site-key' in secret 'mosip-captcha'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_PREREG_CAPTCHA_SECRET_KEY: <set to the key 'prereg-captcha-secret-key' in secret 'mosip-captcha'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_RESIDENT_CAPTCHA_SITE_KEY: <set to the key 'resident-captcha-site-key' in secret 'mosip-captcha'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_RESIDENT_CAPTCHA_SECRET_KEY: <set to the key 'resident-captcha-secret-key' in secret 'mosip-captcha'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_S3_PRETEXT_VALUE: <set to the key 's3-pretext-value' in secret 's3'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MPARTNER_DEFAULT_MOBILE_SECRET: <set to the key 'mpartner_default_mobile_secret' in secret 'keycloak-client-secrets'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_RESIDENT_WEBSUB_AUTHTYPE_STATUS_SECRET: <set to the key 'resident-websub-authtype-status-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_RESIDENT_WEBSUB_AUTH_TRANSACTION_STATUS_SECRET: <set to the key 'resident-websub-auth-transaction-status-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_IDA_KYC_TOKEN_SECRET: <set to the key 'mosip-ida-kyc-token-secret' in secret 'conf-secrets-various'> Optional: false
SPRING_CLOUD_CONFIG_SERVER_OVERRIDES_MOSIP_PARTNER_CRYPTO_P12_PASSWORD: <set to the key 'mosip-partner-crypto-p12-password' in secret 'conf-secrets-various'> Optional: false
Mounts:
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-57g6m (ro)
Conditions:
Type Status
Initialized True
Ready False
ContainersReady False
PodScheduled True
Volumes:
workload-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
credential-socket:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
workload-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-envoy:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
istio-data:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
istio-podinfo:
Type: DownwardAPI (a volume populated by information about the pod)
Items:
metadata.labels -> labels
metadata.annotations -> annotations
istio-token:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 43200
istiod-ca-cert:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-ca-root-cert
Optional: false
kube-api-access-57g6m:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 3607
ConfigMapName: kube-root-ca.crt
Optional: false
DownwardAPI: true
QoS Class: Burstable
Node-Selectors: <none>
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Pulled 8m4s (x12 over 68m) kubelet Container image "mosipid/config-server:1.1.2" already present on machine
Warning Unhealthy 3m25s (x358 over 68m) kubelet Startup probe failed: HTTP probe failed with statuscode: 500
kubectl -n config-server logs config-server-6947d4b546-zx78c -c config-server
2025-10-28 07:39:21,480 [main] INFO [o.s.c.s.AbstractApplicationContext].prepareRefresh.590 : Refreshing org.springframework.context.annotation.AnnotationConfigApplicationContext@3d36e4cd: startup date [Tue Oct 28 07:39:21 UTC 2025]; root of context hierarchy
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.springframework.cglib.core.ReflectUtils$1 (jar:file:/home/mosip/kernel-config-server.jar!/BOOT-INF/lib/spring-core-5.0.6.RELEASE.jar!/) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int,java.security.ProtectionDomain)
WARNING: Please consider reporting this to the maintainers of org.springframework.cglib.core.ReflectUtils$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
2025-10-28 07:39:39,476 [main] INFO [o.s.c.s.PostProcessorRegistrationDelegate$BeanPostProcessorChecker].postProcessAfterInitialization.328 : Bean 'configurationPropertiesRebinderAutoConfiguration' of type [org.springframework.cloud.autoconfigure.ConfigurationPropertiesRebinderAutoConfiguration$$EnhancerBySpringCGLIB$$127f577] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying)
. ____ _ __ _ _
/\\ / ___'_ __ _ _(_)_ __ __ _ \ \ \ \
( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \
\\/ ___)| |_)| | | | | || (_| | ) ) ) )
' |____| .__|_| |_|_| |_\__, | / / / /
=========|_|==============|___/=/_/_/_/
:: Spring Boot :: (v2.0.2.RELEASE)
2025-10-28 07:39:51,875 [main] INFO [o.s.b.SpringApplication].logStartupProfileInfo.659 : No active profile set, falling back to default profiles: default
2025-10-28 07:39:52,778 [main] INFO [o.s.c.s.AbstractApplicationContext].prepareRefresh.590 : Refreshing org.springframework.boot.web.servlet.context.AnnotationConfigServletWebServerApplicationContext@236e3f4e: startup date [Tue Oct 28 07:39:52 UTC 2025]; parent: org.springframework.context.annotation.AnnotationConfigApplicationContext@3d36e4cd
2025-10-28 07:40:35,475 [main] INFO [o.s.c.c.s.GenericScope].setSerializationId.294 : BeanFactory id=569534b7-b1f2-384d-bc50-ee91e861ca55
2025-10-28 07:40:38,877 [main] INFO [o.s.c.s.PostProcessorRegistrationDelegate$BeanPostProcessorChecker].postProcessAfterInitialization.328 : Bean 'org.springframework.cloud.autoconfigure.ConfigurationPropertiesRebinderAutoConfiguration' of type [org.springframework.cloud.autoconfigure.ConfigurationPropertiesRebinderAutoConfiguration$$EnhancerBySpringCGLIB$$127f577] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying)
2025-10-28 07:40:51,180 [main] INFO [o.s.b.w.e.t.TomcatWebServer].initialize.91 : Tomcat initialized with port(s): 51000 (http)
2025-10-28 07:40:52,075 [main] INFO [o.a.j.l.DirectJDKLog].log.180 : Initializing ProtocolHandler ["http-nio-51000"]
2025-10-28 07:40:52,878 [main] INFO [o.a.j.l.DirectJDKLog].log.180 : Starting service [Tomcat]
2025-10-28 07:40:52,878 [main] INFO [o.a.j.l.DirectJDKLog].log.180 : Starting Servlet Engine: Apache Tomcat/8.5.37
2025-10-28 07:40:53,476 [localhost-startStop-1] INFO [o.a.j.l.DirectJDKLog].log.180 : The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: [/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib]
2025-10-28 07:40:56,477 [localhost-startStop-1] INFO [o.a.j.l.DirectJDKLog].log.180 : Initializing Spring embedded WebApplicationContext
2025-10-28 07:40:56,478 [localhost-startStop-1] INFO [o.s.b.w.s.c.ServletWebServerApplicationContext].prepareWebApplicationContext.285 : Root WebApplicationContext: initialization completed in 63700 ms