=== T35 result log ===

$ kubectl apply -f manifest.yaml && kubectl -n istio-vt-t35 wait --for=condition=available deploy/masking-single deploy/masking-double --timeout=90s
pod/client configured
deployment.apps/masking-single unchanged
service/masking-single unchanged
deployment.apps/masking-double unchanged
service/masking-double unchanged
deployment.apps/masking-single condition met
deployment.apps/masking-double condition met

$ (background curl loop against masking-double x60, 0.2s interval, 2s timeout each -> /tmp/mask_double.log)
(started)

$ POD_D=masking-double-74bfd774f-6vtxq ; kubectl -n istio-vt-t35 delete pod $POD_D --grace-period=0 --force
Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely.
pod "masking-double-74bfd774f-6vtxq" force deleted from istio-vt-t35 namespace

$ sort /tmp/mask_double.log | uniq -c
     60 200

$ (background curl loop against masking-single x60, 0.2s interval, 2s timeout each -> /tmp/mask_single.log)
(started)

$ POD_S=masking-single-79cbf997dd-m5tw6 ; kubectl -n istio-vt-t35 delete pod $POD_S --grace-period=0 --force
Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely.
pod "masking-single-79cbf997dd-m5tw6" force deleted from istio-vt-t35 namespace

$ sort /tmp/mask_single.log | uniq -c
      1 000
     52 200
      7 503

=== summary ===
masking-double (replicas=2): total=60 non-200=0
masking-single (replicas=1): total=60 non-200=8

=== final pod state ===
NAME                              READY   STATUS    RESTARTS   AGE
client                            2/2     Running   0          91s
masking-double-74bfd774f-t5z5x    2/2     Running   0          91s
masking-double-74bfd774f-tcddr    2/2     Running   0          64s
masking-single-79cbf997dd-x8hqv   2/2     Running   0          34s