Read-only test identity: patch deployments? no
Read-only test identity: create pods/exec? no
Read-only test identity: get secrets? no

=== LEGACY REPLICA ON THE OLD BUILD ===
deployment.apps/api-legacy image updated
Waiting for deployment "api-legacy" rollout to finish: 1 old replicas are pending termination...
Waiting for deployment "api-legacy" rollout to finish: 1 old replicas are pending termination...
deployment "api-legacy" successfully rolled out

$ python3 service-image-check.py --context lab-reader --namespace brotli-rollout-lab --service api --container api --digest sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53 --min-pods 6
2026-11-06T17:12:33+00:00 context=lab-reader namespace=brotli-rollout-lab service=api container=api
MATCH api-5cb5f6cd9f-8kh4v sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
MATCH api-5cb5f6cd9f-97l7b sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
MATCH api-5cb5f6cd9f-bls5j sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
MATCH api-5cb5f6cd9f-xrmkf sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
MATCH api-5cb5f6cd9f-zzsj4 sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
MISMATCH api-legacy-56f9f9cbf4-zkb87 sha256:44fce696f38ba8c987c4db89954051000bbd05ffd8d8659ba15ed4a8602e937f
FAIL: 1 of 6 ready Pods reported an unexpected image digest
Exit code: 1

=== LEGACY REPLICA REPLACED WITH THE FIXED BUILD ===
deployment.apps/api-legacy image updated
Waiting for deployment "api-legacy" rollout to finish: 1 old replicas are pending termination...
Waiting for deployment "api-legacy" rollout to finish: 1 old replicas are pending termination...
deployment "api-legacy" successfully rolled out

$ python3 service-image-check.py --context lab-reader --namespace brotli-rollout-lab --service api --container api --digest sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53 --min-pods 6
2026-11-06T17:13:15+00:00 context=lab-reader namespace=brotli-rollout-lab service=api container=api
MATCH api-5cb5f6cd9f-8kh4v sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
MATCH api-5cb5f6cd9f-97l7b sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
MATCH api-5cb5f6cd9f-bls5j sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
MATCH api-5cb5f6cd9f-xrmkf sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
MATCH api-5cb5f6cd9f-zzsj4 sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
MATCH api-legacy-85456dcd77-7nnc5 sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
PASS: 6 ready Pods reported approved image digests
Exit code: 0

=== INSUFFICIENT COVERAGE AND MISSING SERVICE ===

$ python3 service-image-check.py --context lab-reader --namespace brotli-rollout-lab --service api --container api --digest sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53 --min-pods 7
INCONCLUSIVE: found 6 distinct eligible Pods; expected at least 7
2026-11-06T17:13:24+00:00 context=lab-reader namespace=brotli-rollout-lab service=api container=api
Exit code: 2

$ python3 service-image-check.py --context lab-reader --namespace brotli-rollout-lab --service missing-service --container api --digest sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53 --min-pods 6
INCONCLUSIVE: Error from server (NotFound): services "missing-service" not found
2026-11-06T17:13:26+00:00 context=lab-reader namespace=brotli-rollout-lab service=missing-service container=api
Exit code: 2