Describe the bug
Applying Istio from release-1.1 branch, then modifying spec.minAvailable to 2 results in an apply error.
Expected behavior
No error.
Steps to reproduce the bug
Apply release-1.1 manifest.
Hand modify a release 1.1 manifest PodDisruptionBudget minAvailable from 1 to 2 in any of the PDBs.
Apply the new manifest.
Error occurs.
Version
release-1.1 branch
Installation
See above.
Environment
Bare Metal K8S 1.13.1
Cluster state
I followed reproducer by changing galley's PDB minAvailable from 1 to 2.
sdake@beast-01:~/go/src/istio.io/istio$ kubectl apply -f $HOME/istio.yaml
configmap/istio-galley-configuration unchanged
configmap/coredns unchanged
configmap/prometheus unchanged
configmap/istio-security-custom-resources unchanged
configmap/istio unchanged
configmap/istio-sidecar-injector unchanged
serviceaccount/istio-galley-service-account unchanged
serviceaccount/istio-egressgateway-service-account unchanged
serviceaccount/istio-ingressgateway-service-account unchanged
serviceaccount/istiocoredns-service-account unchanged
serviceaccount/istio-mixer-service-account unchanged
serviceaccount/istio-pilot-service-account unchanged
serviceaccount/prometheus unchanged
serviceaccount/istio-cleanup-secrets-service-account unchanged
clusterrole.rbac.authorization.k8s.io/istio-cleanup-secrets-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/istio-cleanup-secrets-istio-system unchanged
job.batch/istio-cleanup-secrets-sdake unchanged
serviceaccount/istio-security-post-install-account unchanged
clusterrole.rbac.authorization.k8s.io/istio-security-post-install-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/istio-security-post-install-role-binding-istio-system unchanged
job.batch/istio-security-post-install-sdake unchanged
serviceaccount/istio-citadel-service-account unchanged
serviceaccount/istio-sidecar-injector-service-account unchanged
clusterrole.rbac.authorization.k8s.io/istio-galley-istio-system unchanged
clusterrole.rbac.authorization.k8s.io/istio-egressgateway-istio-system unchanged
clusterrole.rbac.authorization.k8s.io/istio-ingressgateway-istio-system unchanged
clusterrole.rbac.authorization.k8s.io/istiocoredns unchanged
clusterrole.rbac.authorization.k8s.io/istio-mixer-istio-system unchanged
clusterrole.rbac.authorization.k8s.io/istio-pilot-istio-system unchanged
clusterrole.rbac.authorization.k8s.io/prometheus-istio-system unchanged
clusterrole.rbac.authorization.k8s.io/istio-citadel-istio-system unchanged
clusterrole.rbac.authorization.k8s.io/istio-sidecar-injector-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/istio-galley-admin-role-binding-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/istio-egressgateway-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/istio-ingressgateway-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/istio-istiocoredns-role-binding-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/istio-mixer-admin-role-binding-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/istio-pilot-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/prometheus-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/istio-citadel-istio-system unchanged
clusterrolebinding.rbac.authorization.k8s.io/istio-sidecar-injector-admin-role-binding-istio-system unchanged
role.rbac.authorization.k8s.io/istio-ingressgateway-sds unchanged
rolebinding.rbac.authorization.k8s.io/istio-ingressgateway-sds unchanged
service/istio-galley unchanged
service/istio-egressgateway unchanged
service/istio-ingressgateway unchanged
service/istiocoredns unchanged
service/istio-policy unchanged
service/istio-telemetry unchanged
service/istio-pilot unchanged
service/prometheus unchanged
service/istio-citadel unchanged
service/istio-sidecar-injector unchanged
deployment.extensions/istio-galley configured
deployment.extensions/istio-egressgateway unchanged
deployment.extensions/istio-ingressgateway unchanged
deployment.extensions/istiocoredns unchanged
deployment.extensions/istio-policy configured
deployment.extensions/istio-telemetry configured
deployment.extensions/istio-pilot configured
deployment.extensions/prometheus unchanged
deployment.extensions/istio-citadel configured
deployment.extensions/istio-sidecar-injector configured
gateway.networking.istio.io/istio-multicluster-egressgateway unchanged
gateway.networking.istio.io/istio-multicluster-ingressgateway unchanged
envoyfilter.networking.istio.io/istio-multicluster-ingressgateway unchanged
destinationrule.networking.istio.io/istio-multicluster-destinationrule unchanged
horizontalpodautoscaler.autoscaling/istio-egressgateway unchanged
horizontalpodautoscaler.autoscaling/istio-ingressgateway unchanged
horizontalpodautoscaler.autoscaling/istio-policy unchanged
horizontalpodautoscaler.autoscaling/istio-telemetry unchanged
horizontalpodautoscaler.autoscaling/istio-pilot unchanged
mutatingwebhookconfiguration.admissionregistration.k8s.io/istio-sidecar-injector configured
poddisruptionbudget.policy/istio-egressgateway unchanged
poddisruptionbudget.policy/istio-ingressgateway unchanged
poddisruptionbudget.policy/istio-policy unchanged
poddisruptionbudget.policy/istio-telemetry unchanged
poddisruptionbudget.policy/istio-pilot unchanged
attributemanifest.config.istio.io/istioproxy unchanged
attributemanifest.config.istio.io/kubernetes unchanged
handler.config.istio.io/stdio unchanged
logentry.config.istio.io/accesslog unchanged
logentry.config.istio.io/tcpaccesslog unchanged
rule.config.istio.io/stdio unchanged
rule.config.istio.io/stdiotcp unchanged
metric.config.istio.io/requestcount unchanged
metric.config.istio.io/requestduration unchanged
metric.config.istio.io/requestsize unchanged
metric.config.istio.io/responsesize unchanged
metric.config.istio.io/tcpbytesent unchanged
metric.config.istio.io/tcpbytereceived unchanged
metric.config.istio.io/tcpconnectionsopened unchanged
metric.config.istio.io/tcpconnectionsclosed unchanged
handler.config.istio.io/prometheus unchanged
rule.config.istio.io/promhttp unchanged
rule.config.istio.io/promtcp unchanged
rule.config.istio.io/promtcpconnectionopen unchanged
rule.config.istio.io/promtcpconnectionclosed unchanged
handler.config.istio.io/kubernetesenv unchanged
rule.config.istio.io/kubeattrgenrulerule unchanged
rule.config.istio.io/tcpkubeattrgenrulerule unchanged
kubernetes.config.istio.io/attributes unchanged
destinationrule.networking.istio.io/istio-policy unchanged
destinationrule.networking.istio.io/istio-telemetry unchanged
The PodDisruptionBudget "istio-galley" is invalid: spec: Forbidden: updates to poddisruptionbudget spec are forbidden.
Describe the bug
Applying Istio from release-1.1 branch, then modifying spec.minAvailable to 2 results in an apply error.
Expected behavior
No error.
Steps to reproduce the bug
Apply release-1.1 manifest.
Hand modify a release 1.1 manifest PodDisruptionBudget minAvailable from 1 to 2 in any of the PDBs.
Apply the new manifest.
Error occurs.
Version
release-1.1 branch
Installation
See above.
Environment
Bare Metal K8S 1.13.1
Cluster state
I followed reproducer by changing galley's PDB minAvailable from 1 to 2.