---

dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-sinv-int-dev \
>   get platformservice quotes -o yaml
apiVersion: production.platform.ckpr.integrations.rshbintech.ru/v1
kind: PlatformService
metadata:
  annotations:
    ci.build.image.app.farm/version: 10.0.202-alpine3.23-amd64-rshb.2.5.0
    ci.runtime.image.app.farm/version: 10.0.7-alpine3.23-amd64-rshb.2.3.0
    meta.helm.sh/release-name: psvc-quotes
    meta.helm.sh/release-namespace: isys-sinv-int-dev
  creationTimestamp: "2024-08-02T09:01:28Z"
  finalizers:
  - production.platform.ckpr.integrations.rshbintech.ru/finalyzer
  generation: 24
  labels:
    app: raw
    app.kubernetes.io/managed-by: Helm
    chart: raw-0.2.3-rshb.1.0.0
    ci.build.image.app.farm/name: dotnet-sdk-latest
    ci.kubeclientapps.app.farm/version: 8.21.15
    ci.runtime.image.app.farm/name: dotnet-runtime-latest
    ci.service.app.farm/lang: dotnet
    ci.service.app.farm/side: backend
    commitShortSHA: fe8200dc
    heritage: Helm
    release: psvc-quotes
    version: master
  name: quotes
  namespace: isys-sinv-int-dev
  resourceVersion: "25370828078"
  uid: 21c0d906-6325-455c-a748-ee51ca668649
spec:
  cpuLimits: 400m
  cpuRequests: 200m
  description: Сервис котировок
  environment: DEV
  informationSystemId: sinv-int-dev
  istioSidecarSettings:
    limits:
      cpu: 200m
      memory: 512Mi
    requests:
      cpu: 100m
      memory: 512Mi
  managementPort: 9080
  name: Сервер котировок
  projectPath: /rshbintech/it-invest/brokerage-service/sinv/quotes
  publicDomain: quotes
  publishAPI: true
  ramLimits: 2Gi
  ramRequests: 1Gi
  replicaCount: 1
  serviceReference:
    name: quotes
    namespace: isys-sinv-int-dev
  side: backend
  updateStrategy: Recreate
status:
  code: ACTIVE
  deployments:
  - code: ACTIVE
    deploymentName: quotes
    message: Сервис активен
  message: Сервис активен
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-sinv-int-dev \
>   get pod -l app=quotes -o yaml \
>   | grep -iE -C4 'auth|oauth|keycloak|token|client|secret|volume'
  kind: Pod
  metadata:
    annotations:
      checksum/configMapsEnv: 9ad8f4dc4923358377dee37f0f021b4ba81d50b4cf1d0d64b21264dc53f68457
      checksum/secretEnv: 160a93e3c0f3ece661c35f14ab5ed6d9e6af85ef701417bbfe578df902d2bb2e
      ci/commithash: fe8200dc
      cni.projectcalico.org/containerID: d0999df2f0e30398d808422c3f1212673d3b8a0515e92b1262ed3f10028a4734
      cni.projectcalico.org/podIP: 100.68.153.153/32
      cni.projectcalico.org/podIPs: 100.68.153.153/32
--
      sidecar.istio.io/proxyCPU: 100m
      sidecar.istio.io/proxyCPULimit: 200m
      sidecar.istio.io/proxyMemory: 512Mi
      sidecar.istio.io/proxyMemoryLimit: 512Mi
      sidecar.istio.io/status: '{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-certs","workload-socket","credential-socket","workload-certs","istio-envoy","istio-data","istio-podinfo","istio-token","istiod-ca-cert","wasmfilters-dir"],"imagePullSecrets":null,"revision":"default"}'
      sidecar.istio.io/userVolume: '[{"name": "wasmfilters-dir","configMap": {"name":
        "sinv-int-dev-envoy-filters"}}]'
      sidecar.istio.io/userVolumeMount: '[{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]'
    creationTimestamp: "2026-08-25T07:27:16Z"
    generateName: quotes-66d8464f54-
    labels:
      app: quotes
--
      uid: 340d5439-9865-47a5-825e-8bd17f3498b0
    resourceVersion: "25372372724"
    uid: 49a07495-f898-424a-9282-516f48234d10
  spec:
    automountServiceAccountToken: false
    containers:
    - args:
      - proxy
      - sidecar
--
        runAsNonRoot: true
        runAsUser: 1337
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /etc/istio-certs/
        name: istio-certs
      - mountPath: /var/run/secrets/workload-spiffe-uds
        name: workload-socket
      - mountPath: /var/run/secrets/credential-uds
        name: credential-socket
      - mountPath: /var/run/secrets/workload-spiffe-credentials
        name: workload-certs
      - mountPath: /var/run/secrets/istio
        name: istiod-ca-cert
      - mountPath: /var/lib/istio/data
        name: istio-data
      - mountPath: /etc/istio/proxy
        name: istio-envoy
      - mountPath: /var/run/secrets/tokens
        name: istio-token
      - mountPath: /etc/istio/pod
        name: istio-podinfo
      - mountPath: /var/local/lib/wasm-filters
        name: wasmfilters-dir
    - envFrom:
      - configMapRef:
          name: quotes-app-cm-env
      - secretRef:
          name: quotes-app-secret-env
      image: registry.rshbdev.ru/rshbintech/it-invest/brokerage-service/sinv/quotes:master
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 5
--
        runAsNonRoot: true
        runAsUser: 1001
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /secrets
        name: app-vault-secrets
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    initContainers:
--
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    volumes:
    - emptyDir:
        medium: Memory
      name: istio-certs
    - emptyDir: {}
--
            apiVersion: v1
            fieldPath: metadata.annotations
          path: annotations
      name: istio-podinfo
    - name: istio-token
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            audience: istio-ca
            expirationSeconds: 43200
            path: istio-token
    - configMap:
        defaultMode: 420
        name: istio-ca-root-cert
      name: istiod-ca-cert
--
        defaultMode: 420
        name: sinv-int-dev-envoy-filters
      name: wasmfilters-dir
    - csi:
        driver: secrets-store.csi.k8s.io
        readOnly: true
        volumeAttributes:
          secretProviderClass: quotes-app-secret-provider
      name: app-vault-secrets
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-08-25T07:27:19Z"
dmitriev-aal@VDI-Dmitriev-A:~$