From 63d92d58800370e1c6df55acc644a56772e9b15d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E2=80=9CNaeel=E2=80=9D?= Date: Tue, 30 Jun 2026 17:25:51 +0400 Subject: [PATCH] docs: move token docs to docs/ops/API_TOKENS.md + link in TROUBLESHOOTING --- HISTORY/OPUS/3006_token_saga.md => docs/ops/API_TOKENS.md | 0 docs/ops/TROUBLESHOOTING.md | 7 +++++++ 2 files changed, 7 insertions(+) rename HISTORY/OPUS/3006_token_saga.md => docs/ops/API_TOKENS.md (100%) diff --git a/HISTORY/OPUS/3006_token_saga.md b/docs/ops/API_TOKENS.md similarity index 100% rename from HISTORY/OPUS/3006_token_saga.md rename to docs/ops/API_TOKENS.md diff --git a/docs/ops/TROUBLESHOOTING.md b/docs/ops/TROUBLESHOOTING.md index 9e99201..3392d56 100644 --- a/docs/ops/TROUBLESHOOTING.md +++ b/docs/ops/TROUBLESHOOTING.md @@ -1,5 +1,12 @@ # Troubleshooting +## API Nubes — ошибки доступа (403, 401, IAM error) +> **Подробно:** [`docs/ops/API_TOKENS.md`](API_TOKENS.md) — полная документация по токенам, DDoS-Guard, endpoint'ам. +- **403 Forbidden** → проверить `User-Agent` (DDoS-Guard режет не-браузерные UA) +- **401 / IAM error** → проверить `token_type` в JWT (должен быть `"tech"`) +- **Токен работает, но не на этом endpoint** → токены привязаны к стендам (prod/test/dev) +- Правильный curl: `curl -H "User-Agent: Mozilla/5.0 ..." -H "Authorization: Bearer " https://deck-api(-test|-dev).ngcloud.ru/api/v1/index.cfm/...` + ## Registry Server не отвечает 1. `kubectl -n terraform-registry get pods -l app=registry-server` 2. `kubectl -n terraform-registry logs -l app=registry-server --tail=100`