---

dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context rcsdstbl -n isys-ownfin-stress describe rs owf-ms-prd-insurance-rumsk2-b8564fc5c
Name:           owf-ms-prd-insurance-rumsk2-b8564fc5c
Namespace:      isys-ownfin-stress
Selector:       app=owf-ms-prd-insurance,fullname=owf-ms-prd-insurance-rumsk2,pod-template-hash=b8564fc5c,release=owf-ms-prd-insurance-rumsk2
Labels:         app=owf-ms-prd-insurance
                chart=base-1.15.2
                fullname=owf-ms-prd-insurance-rumsk2
                heritage=Helm
                isys=ownfin-stress
                pod-template-hash=b8564fc5c
                psvc=owf-ms-prd-insurance
                release=owf-ms-prd-insurance-rumsk2
                version=stress
                workload.topology.app.farm/zone=rumsk2
Annotations:    deployment.kubernetes.io/desired-replicas: 1
                deployment.kubernetes.io/max-replicas: 1
                deployment.kubernetes.io/revision: 22
                gitlabCommit: 8a9e77b5b128c4329d620c2e5dda43440df62d65
                gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance/-/pipelines/3275729
                meta.helm.sh/release-name: owf-ms-prd-insurance-rumsk2
                meta.helm.sh/release-namespace: isys-ownfin-stress
                platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 8a9e77b5
                platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: 3275729
Controlled By:  Deployment/owf-ms-prd-insurance-rumsk2
Replicas:       0 current / 1 desired
Pods Status:    0 Running / 0 Waiting / 0 Succeeded / 0 Failed
Pod Template:
  Labels:           app=owf-ms-prd-insurance
                    chart=base-1.15.2
                    fullname=owf-ms-prd-insurance-rumsk2
                    heritage=Helm
                    isys=ownfin-stress
                    pod-template-hash=b8564fc5c
                    psvc=owf-ms-prd-insurance
                    release=owf-ms-prd-insurance-rumsk2
                    version=stress
                    workload.topology.app.farm/zone=rumsk2
  Annotations:      checksum/configMapsEnv: c25a38d4fb1993c16c7e615129368d825e43b8460b704bbe129c837b902bb253
                    checksum/secretEnv: ff1dcd93af46da11390b6ca4c2525a3d0efa03562c8495c6361818bf65987e50
                    ci/commithash: 8a9e77b5
                    inject.istio.io/templates: sidecar,custom
                    kubectl.kubernetes.io/restartedAt: 2026-02-06T20:29:13+03:00
                    prometheus.io/path: /metrics
                    prometheus.io/port: 8080
                    prometheus.io/scrape: true
                    sidecar.istio.io/proxyCPU: 10m
                    sidecar.istio.io/proxyCPULimit: 800m
                    sidecar.istio.io/proxyMemory: 40Mi
                    sidecar.istio.io/proxyMemoryLimit: 800Mi
                    sidecar.istio.io/userVolume: [{"name": "wasmfilters-dir","configMap": {"name": "ownfin-stress-envoy-filters"}}]
                    sidecar.istio.io/userVolumeMount: [{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]
  Service Account:  default
  Containers:
   app:
    Image:      registry.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance:stress
    Port:       <none>
    Host Port:  <none>
    Limits:
      cpu:     1500m
      memory:  1536Mi
    Requests:
      cpu:      500m
      memory:   750Mi
    Liveness:   http-get http://:8080/health/liveness delay=100s timeout=1s period=5s #success=1 #failure=5
    Readiness:  http-get http://:8080/health/readiness delay=100s timeout=1s period=10s #success=1 #failure=3
    Environment Variables from:
      owf-ms-prd-insurance-rumsk2-app-cm-env      ConfigMap  Optional: false
      owf-ms-prd-insurance-rumsk2-app-secret-env  Secret     Optional: false
    Environment:                                  <none>
    Mounts:
      /secrets from app-vault-secrets (ro)
  Volumes:
   app-vault-secrets:
    Type:               CSI (a Container Storage Interface (CSI) volume source)
    Driver:             secrets-store.csi.k8s.io
    FSType:             
    ReadOnly:           true
    VolumeAttributes:       secretProviderClass=owf-ms-prd-insurance-rumsk2-app-secret-provider
  Priority Class Name:  rumsk2
  Node-Selectors:       node-role.kubernetes.io/wload=
                        workload.topology.app.farm/zone=rumsk2
  Tolerations:          node-role.kubernetes.io/wload:NoSchedule op=Exists
                        workload.topology.app.farm/zone:NoSchedule op=Exists
Conditions:
  Type             Status  Reason
  ----             ------  ------
  ReplicaFailure   True    FailedCreate
Events:
  Type     Reason        Age                     From                   Message
  ----     ------        ----                    ----                   -------
  Warning  FailedCreate  4m12s (x17 over 9m41s)  replicaset-controller  Error creating: admission webhook "workloadquota-mutating.platform.ckpr.integrations.rshbintech.ru" denied the request: Ошибка при бронировании ресурсов квоты rumsk2 в namespace isys-ownfin-stress: превышена WorkloadQuota: превышены лимиты WorkloadQuota
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context rcsdstbl -n isys-ownfin-stress get pod --show-labels | grep owf-ms-prd-insurance-rumsk2
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context rcsdstbl -n isys-ownfin-stress get rs owf-ms-prd-insurance-rumsk2-b8564fc5c -o yaml
apiVersion: apps/v1
kind: ReplicaSet
metadata:
  annotations:
    deployment.kubernetes.io/desired-replicas: "1"
    deployment.kubernetes.io/max-replicas: "1"
    deployment.kubernetes.io/revision: "22"
    gitlabCommit: 8a9e77b5b128c4329d620c2e5dda43440df62d65
    gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance/-/pipelines/3275729
    meta.helm.sh/release-name: owf-ms-prd-insurance-rumsk2
    meta.helm.sh/release-namespace: isys-ownfin-stress
    platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 8a9e77b5
    platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3275729"
  creationTimestamp: "2026-06-25T08:37:20Z"
  generation: 1
  labels:
    app: owf-ms-prd-insurance
    chart: base-1.15.2
    fullname: owf-ms-prd-insurance-rumsk2
    heritage: Helm
    isys: ownfin-stress
    pod-template-hash: b8564fc5c
    psvc: owf-ms-prd-insurance
    release: owf-ms-prd-insurance-rumsk2
    version: stress
    workload.topology.app.farm/zone: rumsk2
  name: owf-ms-prd-insurance-rumsk2-b8564fc5c
  namespace: isys-ownfin-stress
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: Deployment
    name: owf-ms-prd-insurance-rumsk2
    uid: 52a30466-8ab3-459a-9560-d1824fc0ddaf
  resourceVersion: "24790467895"
  uid: f99b3484-d074-4d37-aa61-ccc266729fc9
spec:
  replicas: 1
  selector:
    matchLabels:
      app: owf-ms-prd-insurance
      fullname: owf-ms-prd-insurance-rumsk2
      pod-template-hash: b8564fc5c
      release: owf-ms-prd-insurance-rumsk2
  template:
    metadata:
      annotations:
        checksum/configMapsEnv: c25a38d4fb1993c16c7e615129368d825e43b8460b704bbe129c837b902bb253
        checksum/secretEnv: ff1dcd93af46da11390b6ca4c2525a3d0efa03562c8495c6361818bf65987e50
        ci/commithash: 8a9e77b5
        inject.istio.io/templates: sidecar,custom
        kubectl.kubernetes.io/restartedAt: "2026-02-06T20:29:13+03:00"
        prometheus.io/path: /metrics
        prometheus.io/port: "8080"
        prometheus.io/scrape: "true"
        sidecar.istio.io/proxyCPU: 10m
        sidecar.istio.io/proxyCPULimit: 800m
        sidecar.istio.io/proxyMemory: 40Mi
        sidecar.istio.io/proxyMemoryLimit: 800Mi
        sidecar.istio.io/userVolume: '[{"name": "wasmfilters-dir","configMap": {"name":
          "ownfin-stress-envoy-filters"}}]'
        sidecar.istio.io/userVolumeMount: '[{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]'
      creationTimestamp: null
      labels:
        app: owf-ms-prd-insurance
        chart: base-1.15.2
        fullname: owf-ms-prd-insurance-rumsk2
        heritage: Helm
        isys: ownfin-stress
        pod-template-hash: b8564fc5c
        psvc: owf-ms-prd-insurance
        release: owf-ms-prd-insurance-rumsk2
        version: stress
        workload.topology.app.farm/zone: rumsk2
    spec:
      automountServiceAccountToken: false
      containers:
      - envFrom:
        - configMapRef:
            name: owf-ms-prd-insurance-rumsk2-app-cm-env
        - secretRef:
            name: owf-ms-prd-insurance-rumsk2-app-secret-env
        image: registry.rshbdev.ru/rshbintech/crft/ckof/ownfin/backend/prd/owf-ms-prd-insurance:stress
        imagePullPolicy: Always
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /health/liveness
            port: 8080
            scheme: HTTP
          initialDelaySeconds: 100
          periodSeconds: 5
          successThreshold: 1
          timeoutSeconds: 1
        name: app
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /health/readiness
            port: 8080
            scheme: HTTP
          initialDelaySeconds: 100
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources:
          limits:
            cpu: 1500m
            memory: 1536Mi
          requests:
            cpu: 500m
            memory: 750Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          procMount: Default
          readOnlyRootFilesystem: false
          runAsGroup: 1001
          runAsNonRoot: true
          runAsUser: 1001
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /secrets
          name: app-vault-secrets
          readOnly: true
      dnsPolicy: ClusterFirst
      nodeSelector:
        node-role.kubernetes.io/wload: ""
        workload.topology.app.farm/zone: rumsk2
      priorityClassName: rumsk2
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext:
        fsGroup: 1001
        fsGroupChangePolicy: OnRootMismatch
        runAsGroup: 1001
        runAsNonRoot: true
        runAsUser: 1001
      serviceAccount: default
      serviceAccountName: default
      terminationGracePeriodSeconds: 30
      tolerations:
      - effect: NoSchedule
        key: node-role.kubernetes.io/wload
        operator: Exists
      - effect: NoSchedule
        key: workload.topology.app.farm/zone
        operator: Exists
      volumes:
      - csi:
          driver: secrets-store.csi.k8s.io
          readOnly: true
          volumeAttributes:
            secretProviderClass: owf-ms-prd-insurance-rumsk2-app-secret-provider
        name: app-vault-secrets
status:
  conditions:
  - lastTransitionTime: "2026-06-25T08:37:20Z"
    message: 'admission webhook "workloadquota-mutating.platform.ckpr.integrations.rshbintech.ru"
      denied the request: Ошибка при бронировании ресурсов квоты rumsk2 в namespace
      isys-ownfin-stress: превышена WorkloadQuota: превышены лимиты WorkloadQuota'
    reason: FailedCreate
    status: "True"
    type: ReplicaFailure
  observedGeneration: 1
  replicas: 0