Closed gowrisankar22 closed 5 years ago
I've never seen anything like this before, but it's an issue with installing Istio itself. Actually, perhaps you're trying to do an upgrade? That seems to match your "field is immutable" error:
https://github.com/istio/istio/issues?utf8=%E2%9C%93&q=is%3Aissue+%22field+is+immutable%22
If so, perhaps Istio's "helm upgrade" option would work for you. Or, if you can, start over with a clean cluster. Either way, I believe you'll be able to get help more quickly for core Istio issues like this through the Isitio community:
Istio Users forum: https://groups.google.com/forum/#!forum/istio-users Istio Github issues: https://github.com/istio/istio/issues
Hello Colleagues,
While running below command we are getting lot of synatax errors as below. can you hava a check ?
kubectl apply -f samples/istio/istio-demo.yaml
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"batch/v1\",\"kind\":\"Job\",\"metadata\":{\"annotations\":{\"helm.sh/hook\":\"post-install\",\"helm.sh/hook-delete-policy\":\"hook-succeeded\"},\"labels\":{\"app\":\"istio-grafana\",\"chart\":\"grafana-1.0.1\",\"heritage\":\"Tiller\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-grafana-post-install\",\"namespace\":\"istio-system\"},\"spec\":{\"template\":{\"metadata\":{\"labels\":{\"app\":\"istio-grafana\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-grafana-post-install\"},\"spec\":{\"containers\":[{\"command\":[\"/bin/bash\",\"/tmp/grafana/run.sh\",\"/tmp/grafana/custom-resources.yaml\"],\"image\":\"quay.io/coreos/hyperkube:v1.7.6_coreos.0\",\"name\":\"hyperkube\",\"volumeMounts\":[{\"mountPath\":\"/tmp/grafana\",\"name\":\"tmp-configmap-grafana\"}]}],\"restartPolicy\":\"OnFailure\",\"serviceAccountName\":\"istio-grafana-post-install-account\",\"volumes\":[{\"configMap\":{\"name\":\"istio-grafana-custom-resources\"},\"name\":\"tmp-configmap-grafana\"}]}}}}\n"},"labels":{"chart":"grafana-1.0.1","release":"RELEASE-NAME"}},"spec":{"template":{"metadata":{"labels":{"release":"RELEASE-NAME"}}}}} to: &{0xc420952180 0xc4204fa9a0 istio-system istio-grafana-post-install samples/istio/istio-demo.yaml 0xc420dd0440 19926 false} for: "samples/istio/istio-demo.yaml": Job.batch "istio-grafana-post-install" is invalid: spec.template: Invalid value: core.PodTemplateSpec{ObjectMeta:v1.ObjectMeta{Name:"istio-grafana-post-install", GenerateName:"", Namespace:"", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:0, loc:(time.Location)(nil)}}, DeletionTimestamp:(v1.Time)(nil), DeletionGracePeriodSeconds:(int64)(nil), Labels:map[string]string{"job-name":"istio-grafana-post-install", "release":"RELEASE-NAME", "app":"istio-grafana", "controller-uid":"4fbc4e6b-d1d9-11e8-bdcc-6e8c518de949"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Initializers:(v1.Initializers)(nil), Finalizers:[]string(nil), ClusterName:""}, Spec:core.PodSpec{Volumes:[]core.Volume{core.Volume{Name:"tmp-configmap-grafana", VolumeSource:core.VolumeSource{HostPath:(core.HostPathVolumeSource)(nil), EmptyDir:(core.EmptyDirVolumeSource)(nil), GCEPersistentDisk:(core.GCEPersistentDiskVolumeSource)(nil), AWSElasticBlockStore:(core.AWSElasticBlockStoreVolumeSource)(nil), GitRepo:(core.GitRepoVolumeSource)(nil), Secret:(core.SecretVolumeSource)(nil), NFS:(core.NFSVolumeSource)(nil), ISCSI:(core.ISCSIVolumeSource)(nil), Glusterfs:(core.GlusterfsVolumeSource)(nil), PersistentVolumeClaim:(core.PersistentVolumeClaimVolumeSource)(nil), RBD:(core.RBDVolumeSource)(nil), Quobyte:(core.QuobyteVolumeSource)(nil), FlexVolume:(core.FlexVolumeSource)(nil), Cinder:(core.CinderVolumeSource)(nil), CephFS:(core.CephFSVolumeSource)(nil), Flocker:(core.FlockerVolumeSource)(nil), DownwardAPI:(core.DownwardAPIVolumeSource)(nil), FC:(core.FCVolumeSource)(nil), AzureFile:(core.AzureFileVolumeSource)(nil), ConfigMap:(core.ConfigMapVolumeSource)(0xc42d00ad00), VsphereVolume:(core.VsphereVirtualDiskVolumeSource)(nil), AzureDisk:(core.AzureDiskVolumeSource)(nil), PhotonPersistentDisk:(core.PhotonPersistentDiskVolumeSource)(nil), Projected:(core.ProjectedVolumeSource)(nil), PortworxVolume:(core.PortworxVolumeSource)(nil), ScaleIO:(core.ScaleIOVolumeSource)(nil), StorageOS:(core.StorageOSVolumeSource)(nil)}}}, InitContainers:[]core.Container(nil), Containers:[]core.Container{core.Container{Name:"hyperkube", Image:"quay.io/coreos/hyperkube:v1.7.6_coreos.0", Command:[]string{"/bin/bash", "/tmp/grafana/run.sh", "/tmp/grafana/custom-resources.yaml"}, Args:[]string(nil), WorkingDir:"", Ports:[]core.ContainerPort(nil), EnvFrom:[]core.EnvFromSource(nil), Env:[]core.EnvVar(nil), Resources:core.ResourceRequirements{Limits:core.ResourceList(nil), Requests:core.ResourceList(nil)}, VolumeMounts:[]core.VolumeMount{core.VolumeMount{Name:"tmp-configmap-grafana", ReadOnly:false, MountPath:"/tmp/grafana", SubPath:"", MountPropagation:(core.MountPropagationMode)(nil)}}, VolumeDevices:[]core.VolumeDevice(nil), LivenessProbe:(core.Probe)(nil), ReadinessProbe:(core.Probe)(nil), Lifecycle:(core.Lifecycle)(nil), TerminationMessagePath:"/dev/termination-log", TerminationMessagePolicy:"File", ImagePullPolicy:"IfNotPresent", SecurityContext:(core.SecurityContext)(nil), Stdin:false, StdinOnce:false, TTY:false}}, RestartPolicy:"OnFailure", TerminationGracePeriodSeconds:(int64)(0xc430544968), ActiveDeadlineSeconds:(int64)(nil), DNSPolicy:"ClusterFirst", NodeSelector:map[string]string(nil), ServiceAccountName:"istio-grafana-post-install-account", AutomountServiceAccountToken:(bool)(nil), NodeName:"", SecurityContext:(core.PodSecurityContext)(0xc42bf231f0), ImagePullSecrets:[]core.LocalObjectReference(nil), Hostname:"", Subdomain:"", Affinity:(core.Affinity)(nil), SchedulerName:"default-scheduler", Tolerations:[]core.Toleration(nil), HostAliases:[]core.HostAlias(nil), PriorityClassName:"", Priority:(int32)(nil), DNSConfig:(core.PodDNSConfig)(nil), ReadinessGates:[]core.PodReadinessGate(nil)}}: field is immutable Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"batch/v1\",\"kind\":\"Job\",\"metadata\":{\"annotations\":{\"helm.sh/hook\":\"post-delete\",\"helm.sh/hook-delete-policy\":\"hook-succeeded\",\"helm.sh/hook-weight\":\"3\"},\"labels\":{\"app\":\"security\",\"chart\":\"security-1.0.1\",\"heritage\":\"Tiller\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-cleanup-secrets\",\"namespace\":\"istio-system\"},\"spec\":{\"template\":{\"metadata\":{\"labels\":{\"app\":\"security\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-cleanup-secrets\"},\"spec\":{\"containers\":[{\"command\":[\"/bin/bash\",\"-c\",\"kubectl get secret --all-namespaces | grep \\"istio.io/key-and-cert\\" | while read -r entry; do\n ns=$(echo $entry | awk '{print $1}');\n name=$(echo $entry | awk '{print $2}');\n kubectl delete secret $name -n $ns;\ndone\n\"],\"image\":\"quay.io/coreos/hyperkube:v1.7.6_coreos.0\",\"name\":\"hyperkube\"}],\"restartPolicy\":\"OnFailure\",\"serviceAccountName\":\"istio-cleanup-secrets-service-account\"}}}}\n"},"labels":{"chart":"security-1.0.1","release":"RELEASE-NAME"}},"spec":{"template":{"metadata":{"labels":{"release":"RELEASE-NAME"}}}}} to: &{0xc420952240 0xc421009880 istio-system istio-cleanup-secrets samples/istio/istio-demo.yaml 0xc42000c240 19919 false} for: "samples/istio/istio-demo.yaml": Job.batch "istio-cleanup-secrets" is invalid: spec.template: Invalid value: core.PodTemplateSpec{ObjectMeta:v1.ObjectMeta{Name:"istio-cleanup-secrets", GenerateName:"", Namespace:"", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:0, loc:(time.Location)(nil)}}, DeletionTimestamp:(v1.Time)(nil), DeletionGracePeriodSeconds:(int64)(nil), Labels:map[string]string{"app":"security", "controller-uid":"517b8abb-d1d9-11e8-bdcc-6e8c518de949", "job-name":"istio-cleanup-secrets", "release":"RELEASE-NAME"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Initializers:(v1.Initializers)(nil), Finalizers:[]string(nil), ClusterName:""}, Spec:core.PodSpec{Volumes:[]core.Volume(nil), InitContainers:[]core.Container(nil), Containers:[]core.Container{core.Container{Name:"hyperkube", Image:"quay.io/coreos/hyperkube:v1.7.6_coreos.0", Command:[]string{"/bin/bash", "-c", "kubectl get secret --all-namespaces | grep \"istio.io/key-and-cert\" | while read -r entry; do\n ns=$(echo $entry | awk '{print $1}');\n name=$(echo $entry | awk '{print $2}');\n kubectl delete secret $name -n $ns;\ndone\n"}, Args:[]string(nil), WorkingDir:"", Ports:[]core.ContainerPort(nil), EnvFrom:[]core.EnvFromSource(nil), Env:[]core.EnvVar(nil), Resources:core.ResourceRequirements{Limits:core.ResourceList(nil), Requests:core.ResourceList(nil)}, VolumeMounts:[]core.VolumeMount(nil), VolumeDevices:[]core.VolumeDevice(nil), LivenessProbe:(core.Probe)(nil), ReadinessProbe:(core.Probe)(nil), Lifecycle:(core.Lifecycle)(nil), TerminationMessagePath:"/dev/termination-log", TerminationMessagePolicy:"File", ImagePullPolicy:"IfNotPresent", SecurityContext:(core.SecurityContext)(nil), Stdin:false, StdinOnce:false, TTY:false}}, RestartPolicy:"OnFailure", TerminationGracePeriodSeconds:(int64)(0xc439afed98), ActiveDeadlineSeconds:(int64)(nil), DNSPolicy:"ClusterFirst", NodeSelector:map[string]string(nil), ServiceAccountName:"istio-cleanup-secrets-service-account", AutomountServiceAccountToken:(bool)(nil), NodeName:"", SecurityContext:(core.PodSecurityContext)(0xc4268e6770), ImagePullSecrets:[]core.LocalObjectReference(nil), Hostname:"", Subdomain:"", Affinity:(core.Affinity)(nil), SchedulerName:"default-scheduler", Tolerations:[]core.Toleration(nil), HostAliases:[]core.HostAlias(nil), PriorityClassName:"", Priority:(int32)(nil), DNSConfig:(core.PodDNSConfig)(nil), ReadinessGates:[]core.PodReadinessGate(nil)}}: field is immutable Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"galley\",\"chart\":\"galley-1.0.1\",\"heritage\":\"Tiller\",\"istio\":\"galley\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-galley\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"strategy\":{\"rollingUpdate\":{\"maxSurge\":1,\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"istio\":\"galley\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"ppc64le\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"s390x\"]}]},\"weight\":2}],\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\",\"ppc64le\",\"s390x\"]}]}]}}},\"containers\":[{\"command\":[\"/usr/local/bin/galley\",\"validator\",\"--deployment-namespace=istio-system\",\"--caCertFile=/etc/istio/certs/root-cert.pem\",\"--tlsCertFile=/etc/istio/certs/cert-chain.pem\",\"--tlsKeyFile=/etc/istio/certs/key.pem\",\"--healthCheckInterval=1s\",\"--healthCheckFile=/health\",\"--webhook-config-file\",\"/etc/istio/config/validatingwebhookconfiguration.yaml\"],\"image\":\"gcr.io/istio-release/galley:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"exec\":{\"command\":[\"/usr/local/bin/galley\",\"probe\",\"--probe-path=/health\",\"--interval=10s\"]},\"initialDelaySeconds\":5,\"periodSeconds\":5},\"name\":\"validator\",\"ports\":[{\"containerPort\":443},{\"containerPort\":9093}],\"readinessProbe\":{\"exec\":{\"command\":[\"/usr/local/bin/galley\",\"probe\",\"--probe-path=/health\",\"--interval=10s\"]},\"initialDelaySeconds\":5,\"periodSeconds\":5},\"resources\":{\"requests\":{\"cpu\":\"10m\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/istio/certs\",\"name\":\"certs\",\"readOnly\":true},{\"mountPath\":\"/etc/istio/config\",\"name\":\"config\",\"readOnly\":true}]}],\"serviceAccountName\":\"istio-galley-service-account\",\"volumes\":[{\"name\":\"certs\",\"secret\":{\"secretName\":\"istio.istio-galley-service-account\"}},{\"configMap\":{\"name\":\"istio-galley-configuration\"},\"name\":\"config\"}]}}}}\n"},"labels":{"chart":"galley-1.0.1","release":"RELEASE-NAME","version":null}},"spec":{"strategy":{"$retainKeys":["rollingUpdate"]},"template":{"metadata":{"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"validator"}],"containers":[{"command":["/usr/local/bin/galley","validator","--deployment-namespace=istio-system","--caCertFile=/etc/istio/certs/root-cert.pem","--tlsCertFile=/etc/istio/certs/cert-chain.pem","--tlsKeyFile=/etc/istio/certs/key.pem","--healthCheckInterval=1s","--healthCheckFile=/health","--webhook-config-file","/etc/istio/config/validatingwebhookconfiguration.yaml"],"image":"gcr.io/istio-release/galley:1.0.2","imagePullPolicy":"IfNotPresent","livenessProbe":{"exec":{"command":["/usr/local/bin/galley","probe","--probe-path=/health","--interval=10s"]},"initialDelaySeconds":5,"periodSeconds":5},"name":"validator","ports":[{"containerPort":443},{"containerPort":9093}],"readinessProbe":{"exec":{"command":["/usr/local/bin/galley","probe","--probe-path=/health","--interval=10s"]},"initialDelaySeconds":5,"periodSeconds":5},"resources":{"requests":{"cpu":"10m"}},"volumeMounts":[{"mountPath":"/etc/istio/certs","name":"certs","readOnly":true},{"mountPath":"/etc/istio/config","name":"config","readOnly":true}]},{"$patch":"delete","name":"galley"}]}}}} to: &{0xc42111c840 0xc4201a6070 istio-system istio-galley samples/istio/istio-demo.yaml 0xc420dd0000 20211 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "istio-galley" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"istio":"galley"}:
selector
does not match templatelabels
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"istio-egressgateway\",\"chart\":\"gateways-1.0.1\",\"heritage\":\"Tiller\",\"istio\":\"egressgateway\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-egressgateway\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"app\":\"istio-egressgateway\",\"istio\":\"egressgateway\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"ppc64le\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"s390x\"]}]},\"weight\":2}],\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\",\"ppc64le\",\"s390x\"]}]}]}}},\"containers\":[{\"args\":[\"proxy\",\"router\",\"-v\",\"2\",\"--discoveryRefreshDelay\",\"1s\",\"--drainDuration\",\"45s\",\"--parentShutdownDuration\",\"1m0s\",\"--connectTimeout\",\"10s\",\"--serviceCluster\",\"istio-egressgateway\",\"--zipkinAddress\",\"zipkin:9411\",\"--statsdUdpAddress\",\"istio-statsd-prom-bridge:9125\",\"--proxyAdminPort\",\"15000\",\"--controlPlaneAuthPolicy\",\"NONE\",\"--discoveryAddress\",\"istio-pilot:8080\"],\"env\":[{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.name\"}}},{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"INSTANCE_IP\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"status.podIP\"}}},{\"name\":\"ISTIO_META_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}}],\"image\":\"gcr.io/istio-release/proxyv2:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"istio-proxy\",\"ports\":[{\"containerPort\":80},{\"containerPort\":443}],\"resources\":{\"requests\":{\"cpu\":\"10m\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/certs\",\"name\":\"istio-certs\",\"readOnly\":true},{\"mountPath\":\"/etc/istio/egressgateway-certs\",\"name\":\"egressgateway-certs\",\"readOnly\":true},{\"mountPath\":\"/etc/istio/egressgateway-ca-certs\",\"name\":\"egressgateway-ca-certs\",\"readOnly\":true}]}],\"serviceAccountName\":\"istio-egressgateway-service-account\",\"volumes\":[{\"name\":\"istio-certs\",\"secret\":{\"optional\":true,\"secretName\":\"istio.istio-egressgateway-service-account\"}},{\"name\":\"egressgateway-certs\",\"secret\":{\"optional\":true,\"secretName\":\"istio-egressgateway-certs\"}},{\"name\":\"egressgateway-ca-certs\",\"secret\":{\"optional\":true,\"secretName\":\"istio-egressgateway-ca-certs\"}}]}}}}\n"},"labels":{"chart":"gateways-1.0.1","release":"RELEASE-NAME","version":null}},"spec":{"template":{"metadata":{"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"istio-proxy"}],"containers":[{"$setElementOrder/ports":[{"containerPort":80},{"containerPort":443}],"args":["proxy","router","-v","2","--discoveryRefreshDelay","1s","--drainDuration","45s","--parentShutdownDuration","1m0s","--connectTimeout","10s","--serviceCluster","istio-egressgateway","--zipkinAddress","zipkin:9411","--statsdUdpAddress","istio-statsd-prom-bridge:9125","--proxyAdminPort","15000","--controlPlaneAuthPolicy","NONE","--discoveryAddress","istio-pilot:8080"],"image":"gcr.io/istio-release/proxyv2:1.0.2","name":"istio-proxy","ports":[{"$patch":"delete","containerPort":15090}]}]}}}} to: &{0xc42111ca80 0xc4211b35e0 istio-system istio-egressgateway samples/istio/istio-demo.yaml 0xc420dd00b8 19960 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "istio-egressgateway" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"app":"istio-egressgateway", "istio":"egressgateway"}:selector
does not match templatelabels
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"istio-ingressgateway\",\"chart\":\"gateways-1.0.1\",\"heritage\":\"Tiller\",\"istio\":\"ingressgateway\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-ingressgateway\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"app\":\"istio-ingressgateway\",\"istio\":\"ingressgateway\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"ppc64le\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"s390x\"]}]},\"weight\":2}],\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\",\"ppc64le\",\"s390x\"]}]}]}}},\"containers\":[{\"args\":[\"proxy\",\"router\",\"-v\",\"2\",\"--discoveryRefreshDelay\",\"1s\",\"--drainDuration\",\"45s\",\"--parentShutdownDuration\",\"1m0s\",\"--connectTimeout\",\"10s\",\"--serviceCluster\",\"istio-ingressgateway\",\"--zipkinAddress\",\"zipkin:9411\",\"--statsdUdpAddress\",\"istio-statsd-prom-bridge:9125\",\"--proxyAdminPort\",\"15000\",\"--controlPlaneAuthPolicy\",\"NONE\",\"--discoveryAddress\",\"istio-pilot:8080\"],\"env\":[{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.name\"}}},{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"INSTANCE_IP\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"status.podIP\"}}},{\"name\":\"ISTIO_META_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}}],\"image\":\"gcr.io/istio-release/proxyv2:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"istio-proxy\",\"ports\":[{\"containerPort\":80},{\"containerPort\":443},{\"containerPort\":31400},{\"containerPort\":15011},{\"containerPort\":8060},{\"containerPort\":853},{\"containerPort\":15030},{\"containerPort\":15031}],\"resources\":{\"requests\":{\"cpu\":\"10m\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/certs\",\"name\":\"istio-certs\",\"readOnly\":true},{\"mountPath\":\"/etc/istio/ingressgateway-certs\",\"name\":\"ingressgateway-certs\",\"readOnly\":true},{\"mountPath\":\"/etc/istio/ingressgateway-ca-certs\",\"name\":\"ingressgateway-ca-certs\",\"readOnly\":true}]}],\"serviceAccountName\":\"istio-ingressgateway-service-account\",\"volumes\":[{\"name\":\"istio-certs\",\"secret\":{\"optional\":true,\"secretName\":\"istio.istio-ingressgateway-service-account\"}},{\"name\":\"ingressgateway-certs\",\"secret\":{\"optional\":true,\"secretName\":\"istio-ingressgateway-certs\"}},{\"name\":\"ingressgateway-ca-certs\",\"secret\":{\"optional\":true,\"secretName\":\"istio-ingressgateway-ca-certs\"}}]}}}}\n"},"labels":{"chart":"gateways-1.0.1","release":"RELEASE-NAME","version":null}},"spec":{"template":{"metadata":{"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"istio-proxy"}],"containers":[{"$setElementOrder/ports":[{"containerPort":80},{"containerPort":443},{"containerPort":31400},{"containerPort":15011},{"containerPort":8060},{"containerPort":853},{"containerPort":15030},{"containerPort":15031}],"args":["proxy","router","-v","2","--discoveryRefreshDelay","1s","--drainDuration","45s","--parentShutdownDuration","1m0s","--connectTimeout","10s","--serviceCluster","istio-ingressgateway","--zipkinAddress","zipkin:9411","--statsdUdpAddress","istio-statsd-prom-bridge:9125","--proxyAdminPort","15000","--controlPlaneAuthPolicy","NONE","--discoveryAddress","istio-pilot:8080"],"image":"gcr.io/istio-release/proxyv2:1.0.2","name":"istio-proxy","ports":[{"$patch":"delete","containerPort":15090}]}]}}}} to: &{0xc42111cf00 0xc4203a9ce0 istio-system istio-ingressgateway samples/istio/istio-demo.yaml 0xc4204f0730 19964 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "istio-ingressgateway" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"istio":"ingressgateway", "app":"istio-ingressgateway"}:selector
does not match templatelabels
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"grafana\",\"chart\":\"grafana-1.0.1\",\"heritage\":\"Tiller\",\"release\":\"RELEASE-NAME\"},\"name\":\"grafana\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"app\":\"grafana\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"ppc64le\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"s390x\"]}]},\"weight\":2}],\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\",\"ppc64le\",\"s390x\"]}]}]}}},\"containers\":[{\"env\":[{\"name\":\"GRAFANA_PORT\",\"value\":\"3000\"},{\"name\":\"GF_AUTH_BASIC_ENABLED\",\"value\":\"false\"},{\"name\":\"GF_AUTH_ANONYMOUS_ENABLED\",\"value\":\"true\"},{\"name\":\"GF_AUTH_ANONYMOUS_ORG_ROLE\",\"value\":\"Admin\"},{\"name\":\"GF_PATHS_DATA\",\"value\":\"/data/grafana\"}],\"image\":\"gcr.io/istio-release/grafana:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"grafana\",\"ports\":[{\"containerPort\":3000}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/login\",\"port\":3000}},\"resources\":{\"requests\":{\"cpu\":\"10m\"}},\"volumeMounts\":[{\"mountPath\":\"/data/grafana\",\"name\":\"data\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"data\"}]}}}}\n"},"labels":{"app":"grafana","chart":"grafana-1.0.1","release":"RELEASE-NAME","version":null}},"spec":{"template":{"metadata":{"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"grafana"}],"$setElementOrder/volumes":[{"name":"data"}],"containers":[{"$setElementOrder/volumeMounts":[{"mountPath":"/data/grafana"}],"image":"gcr.io/istio-release/grafana:1.0.2","name":"grafana","volumeMounts":[{"$patch":"delete","mountPath":"/etc/grafana/provisioning/dashboards/dashboardproviders.yaml"},{"$patch":"delete","mountPath":"/etc/grafana/provisioning/datasources/datasources.yaml"},{"$patch":"delete","mountPath":"/var/lib/grafana/dashboards/istio"}]}],"volumes":[{"$patch":"delete","name":"config"},{"$patch":"delete","name":"dashboards-istio"}]}}}} to: &{0xc4208286c0 0xc4206164d0 istio-system grafana samples/istio/istio-demo.yaml 0xc420dd02a8 20001 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "grafana" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"app":"grafana"}:selector
does not match templatelabels
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"chart\":\"mixer-1.0.1\",\"istio\":\"mixer\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-policy\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"app\":\"policy\",\"istio\":\"mixer\",\"istio-mixer-type\":\"policy\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"ppc64le\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"s390x\"]}]},\"weight\":2}],\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\",\"ppc64le\",\"s390x\"]}]}]}}},\"containers\":[{\"args\":[\"--address\",\"unix:///sock/mixer.socket\",\"--configStoreURL=k8s://\",\"--configDefaultNamespace=istio-system\",\"--trace_zipkin_url=http://zipkin:9411/api/v1/spans\"],\"image\":\"gcr.io/apigee-api-management-istio/istio-mixer:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/version\",\"port\":9093},\"initialDelaySeconds\":5,\"periodSeconds\":5},\"name\":\"mixer\",\"ports\":[{\"containerPort\":9093},{\"containerPort\":42422}],\"resources\":{\"requests\":{\"cpu\":\"10m\"}},\"volumeMounts\":[{\"mountPath\":\"/sock\",\"name\":\"uds-socket\"}]},{\"args\":[\"proxy\",\"--serviceCluster\",\"istio-policy\",\"--templateFile\",\"/etc/istio/proxy/envoy_policy.yaml.tmpl\",\"--controlPlaneAuthPolicy\",\"NONE\"],\"env\":[{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.name\"}}},{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"INSTANCE_IP\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"status.podIP\"}}}],\"image\":\"gcr.io/istio-release/proxyv2:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"istio-proxy\",\"ports\":[{\"containerPort\":9091},{\"containerPort\":15004}],\"resources\":{\"requests\":{\"cpu\":\"10m\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/certs\",\"name\":\"istio-certs\",\"readOnly\":true},{\"mountPath\":\"/sock\",\"name\":\"uds-socket\"}]}],\"serviceAccountName\":\"istio-mixer-service-account\",\"volumes\":[{\"name\":\"istio-certs\",\"secret\":{\"optional\":true,\"secretName\":\"istio.istio-mixer-service-account\"}},{\"emptyDir\":{},\"name\":\"uds-socket\"}]}}}}\n"},"labels":{"app":null,"chart":"mixer-1.0.1","heritage":null,"release":"RELEASE-NAME","version":null}},"spec":{"template":{"metadata":{"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"mixer"},{"name":"istio-proxy"}],"containers":[{"image":"gcr.io/apigee-api-management-istio/istio-mixer:1.0.2","name":"mixer"},{"$setElementOrder/ports":[{"containerPort":9091},{"containerPort":15004}],"args":["proxy","--serviceCluster","istio-policy","--templateFile","/etc/istio/proxy/envoy_policy.yaml.tmpl","--controlPlaneAuthPolicy","NONE"],"image":"gcr.io/istio-release/proxyv2:1.0.2","name":"istio-proxy","ports":[{"containerPort":9091},{"containerPort":15004},{"$patch":"delete","containerPort":15090}]}]}}}} to: &{0xc42009d740 0xc420faab60 istio-system istio-policy samples/istio/istio-demo.yaml 0xc42000c688 28137 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "istio-policy" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"istio-mixer-type":"policy", "app":"policy", "istio":"mixer"}:selector
does not match templatelabels
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"chart\":\"mixer-1.0.1\",\"istio\":\"mixer\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-telemetry\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"app\":\"telemetry\",\"istio\":\"mixer\",\"istio-mixer-type\":\"telemetry\"}},\"spec\":{\"containers\":[{\"args\":[\"--address\",\"unix:///sock/mixer.socket\",\"--configStoreURL=k8s://\",\"--configDefaultNamespace=istio-system\",\"--trace_zipkin_url=http://zipkin:9411/api/v1/spans\"],\"image\":\"gcr.io/apigee-api-management-istio/istio-mixer:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/version\",\"port\":9093},\"initialDelaySeconds\":5,\"periodSeconds\":5},\"name\":\"mixer\",\"ports\":[{\"containerPort\":9093},{\"containerPort\":42422}],\"resources\":{\"requests\":{\"cpu\":\"10m\"}},\"volumeMounts\":[{\"mountPath\":\"/sock\",\"name\":\"uds-socket\"}]},{\"args\":[\"proxy\",\"--serviceCluster\",\"istio-telemetry\",\"--templateFile\",\"/etc/istio/proxy/envoy_telemetry.yaml.tmpl\",\"--controlPlaneAuthPolicy\",\"NONE\"],\"env\":[{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.name\"}}},{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"INSTANCE_IP\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"status.podIP\"}}}],\"image\":\"gcr.io/istio-release/proxyv2:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"istio-proxy\",\"ports\":[{\"containerPort\":9091},{\"containerPort\":15004}],\"resources\":{\"requests\":{\"cpu\":\"10m\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/certs\",\"name\":\"istio-certs\",\"readOnly\":true},{\"mountPath\":\"/sock\",\"name\":\"uds-socket\"}]}],\"serviceAccountName\":\"istio-mixer-service-account\",\"volumes\":[{\"name\":\"istio-certs\",\"secret\":{\"optional\":true,\"secretName\":\"istio.istio-mixer-service-account\"}},{\"emptyDir\":{},\"name\":\"uds-socket\"}]}}}}\n"},"labels":{"app":null,"chart":"mixer-1.0.1","heritage":null,"release":"RELEASE-NAME","version":null}},"spec":{"template":{"metadata":{"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"mixer"},{"name":"istio-proxy"}],"containers":[{"image":"gcr.io/apigee-api-management-istio/istio-mixer:1.0.2","name":"mixer"},{"$setElementOrder/ports":[{"containerPort":9091},{"containerPort":15004}],"args":["proxy","--serviceCluster","istio-telemetry","--templateFile","/etc/istio/proxy/envoy_telemetry.yaml.tmpl","--controlPlaneAuthPolicy","NONE"],"image":"gcr.io/istio-release/proxyv2:1.0.2","name":"istio-proxy","ports":[{"containerPort":9091},{"containerPort":15004},{"$patch":"delete","containerPort":15090}]}]}}}} to: &{0xc42111d440 0xc420d1b8f0 istio-system istio-telemetry samples/istio/istio-demo.yaml 0xc42000c870 31902 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "istio-telemetry" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"istio-mixer-type":"telemetry", "app":"telemetry", "istio":"mixer"}:selector
does not match templatelabels
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"checksum/config-volume\":\"f8da08b6b8c170dde721efd680270b2901e750d4aa186ebb6c22bef5b78a43f9\"},\"labels\":{\"app\":\"istio-pilot\",\"chart\":\"pilot-1.0.1\",\"heritage\":\"Tiller\",\"istio\":\"pilot\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-pilot\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"app\":\"pilot\",\"istio\":\"pilot\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"ppc64le\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"s390x\"]}]},\"weight\":2}],\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\",\"ppc64le\",\"s390x\"]}]}]}}},\"containers\":[{\"args\":[\"discovery\"],\"env\":[{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.name\"}}},{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"PILOT_CACHE_SQUASH\",\"value\":\"5\"},{\"name\":\"GODEBUG\",\"value\":\"gctrace=2\"},{\"name\":\"PILOT_PUSH_THROTTLE_COUNT\",\"value\":\"100\"},{\"name\":\"PILOT_TRACE_SAMPLING\",\"value\":\"100\"}],\"image\":\"gcr.io/istio-release/pilot:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"discovery\",\"ports\":[{\"containerPort\":8080},{\"containerPort\":15010}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/ready\",\"port\":8080},\"initialDelaySeconds\":5,\"periodSeconds\":30,\"timeoutSeconds\":5},\"resources\":{\"requests\":{\"cpu\":\"500m\",\"memory\":\"2048Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/istio/config\",\"name\":\"config-volume\"},{\"mountPath\":\"/etc/certs\",\"name\":\"istio-certs\",\"readOnly\":true}]},{\"args\":[\"proxy\",\"--serviceCluster\",\"istio-pilot\",\"--templateFile\",\"/etc/istio/proxy/envoy_pilot.yaml.tmpl\",\"--controlPlaneAuthPolicy\",\"NONE\"],\"env\":[{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.name\"}}},{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"INSTANCE_IP\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"status.podIP\"}}}],\"image\":\"gcr.io/istio-release/proxyv2:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"istio-proxy\",\"ports\":[{\"containerPort\":15003},{\"containerPort\":15005},{\"containerPort\":15007},{\"containerPort\":15011}],\"resources\":{\"requests\":{\"cpu\":\"10m\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/certs\",\"name\":\"istio-certs\",\"readOnly\":true}]}],\"serviceAccountName\":\"istio-pilot-service-account\",\"volumes\":[{\"configMap\":{\"name\":\"istio\"},\"name\":\"config-volume\"},{\"name\":\"istio-certs\",\"secret\":{\"optional\":true,\"secretName\":\"istio.istio-pilot-service-account\"}}]}}}}\n"},"labels":{"chart":"pilot-1.0.1","release":"RELEASE-NAME","version":null}},"spec":{"template":{"metadata":{"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"discovery"},{"name":"istio-proxy"}],"containers":[{"image":"gcr.io/istio-release/pilot:1.0.2","name":"discovery","resources":{"requests":{"memory":"2048Mi"}}},{"args":["proxy","--serviceCluster","istio-pilot","--templateFile","/etc/istio/proxy/envoy_pilot.yaml.tmpl","--controlPlaneAuthPolicy","NONE"],"image":"gcr.io/istio-release/proxyv2:1.0.2","name":"istio-proxy"}]}}}} to: &{0xc4208286c0 0xc420121ab0 istio-system istio-pilot samples/istio/istio-demo.yaml 0xc42000c150 20022 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "istio-pilot" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"istio":"pilot", "app":"pilot"}:selector
does not match templatelabels
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"security\",\"chart\":\"security-1.0.1\",\"heritage\":\"Tiller\",\"istio\":\"citadel\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-citadel\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"istio\":\"citadel\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"ppc64le\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"s390x\"]}]},\"weight\":2}],\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\",\"ppc64le\",\"s390x\"]}]}]}}},\"containers\":[{\"args\":[\"--append-dns-names=true\",\"--grpc-port=8060\",\"--grpc-hostname=citadel\",\"--citadel-storage-namespace=istio-system\",\"--custom-dns-names=istio-pilot-service-account.istio-system:istio-pilot.istio-system,istio-ingressgateway-service-account.istio-system:istio-ingressgateway.istio-system\",\"--self-signed-ca=true\"],\"image\":\"gcr.io/istio-release/citadel:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"citadel\",\"resources\":{\"requests\":{\"cpu\":\"10m\"}}}],\"serviceAccountName\":\"istio-citadel-service-account\"}}}}\n"},"labels":{"chart":"security-1.0.1","release":"RELEASE-NAME","version":null}},"spec":{"template":{"metadata":{"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"citadel"}],"containers":[{"args":["--append-dns-names=true","--grpc-port=8060","--grpc-hostname=citadel","--citadel-storage-namespace=istio-system","--custom-dns-names=istio-pilot-service-account.istio-system:istio-pilot.istio-system,istio-ingressgateway-service-account.istio-system:istio-ingressgateway.istio-system","--self-signed-ca=true"],"image":"gcr.io/istio-release/citadel:1.0.2","name":"citadel"}]}}}} to: &{0xc42111c180 0xc4203eddc0 istio-system istio-citadel samples/istio/istio-demo.yaml 0xc4204f0000 20034 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "istio-citadel" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"istio":"citadel"}:selector
does not match templatelabels
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"servicegraph\",\"chart\":\"servicegraph-1.0.1\",\"heritage\":\"Tiller\",\"release\":\"RELEASE-NAME\"},\"name\":\"servicegraph\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"app\":\"servicegraph\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"ppc64le\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"s390x\"]}]},\"weight\":2}],\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\",\"ppc64le\",\"s390x\"]}]}]}}},\"containers\":[{\"args\":[\"--prometheusAddr=http://prometheus:9090\"],\"image\":\"gcr.io/istio-release/servicegraph:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/graph\",\"port\":8088}},\"name\":\"servicegraph\",\"ports\":[{\"containerPort\":8088}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/graph\",\"port\":8088}},\"resources\":{\"requests\":{\"cpu\":\"10m\"}}}]}}}}\n"},"labels":{"chart":"servicegraph-1.0.1","release":"RELEASE-NAME","version":null}},"spec":{"template":{"metadata":{"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"servicegraph"}],"containers":[{"image":"gcr.io/istio-release/servicegraph:1.0.2","name":"servicegraph"}]}}}} to: &{0xc42009cd80 0xc420379f10 istio-system servicegraph samples/istio/istio-demo.yaml 0xc4204f0340 20085 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "servicegraph" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"app":"servicegraph"}:selector
does not match templatelabels
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"sidecarInjectorWebhook\",\"chart\":\"sidecarInjectorWebhook-1.0.1\",\"heritage\":\"Tiller\",\"istio\":\"sidecar-injector\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-sidecar-injector\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"istio\":\"sidecar-injector\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"ppc64le\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"s390x\"]}]},\"weight\":2}],\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\",\"ppc64le\",\"s390x\"]}]}]}}},\"containers\":[{\"args\":[\"--caCertFile=/etc/istio/certs/root-cert.pem\",\"--tlsCertFile=/etc/istio/certs/cert-chain.pem\",\"--tlsKeyFile=/etc/istio/certs/key.pem\",\"--injectConfig=/etc/istio/inject/config\",\"--meshConfig=/etc/istio/config/mesh\",\"--healthCheckInterval=2s\",\"--healthCheckFile=/health\"],\"image\":\"gcr.io/istio-release/sidecar_injector:1.0.2\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"exec\":{\"command\":[\"/usr/local/bin/sidecar-injector\",\"probe\",\"--probe-path=/health\",\"--interval=4s\"]},\"initialDelaySeconds\":4,\"periodSeconds\":4},\"name\":\"sidecar-injector-webhook\",\"readinessProbe\":{\"exec\":{\"command\":[\"/usr/local/bin/sidecar-injector\",\"probe\",\"--probe-path=/health\",\"--interval=4s\"]},\"initialDelaySeconds\":4,\"periodSeconds\":4},\"resources\":{\"requests\":{\"cpu\":\"10m\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/istio/config\",\"name\":\"config-volume\",\"readOnly\":true},{\"mountPath\":\"/etc/istio/certs\",\"name\":\"certs\",\"readOnly\":true},{\"mountPath\":\"/etc/istio/inject\",\"name\":\"inject-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"istio-sidecar-injector-service-account\",\"volumes\":[{\"configMap\":{\"name\":\"istio\"},\"name\":\"config-volume\"},{\"name\":\"certs\",\"secret\":{\"secretName\":\"istio.istio-sidecar-injector-service-account\"}},{\"configMap\":{\"items\":[{\"key\":\"config\",\"path\":\"config\"}],\"name\":\"istio-sidecar-injector\"},\"name\":\"inject-config\"}]}}}}\n"},"labels":{"chart":"sidecarInjectorWebhook-1.0.1","release":"RELEASE-NAME","version":null}},"spec":{"template":{"metadata":{"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"sidecar-injector-webhook"}],"containers":[{"image":"gcr.io/istio-release/sidecar_injector:1.0.2","name":"sidecar-injector-webhook"}]}}}} to: &{0xc42111c3c0 0xc4211b4690 istio-system istio-sidecar-injector samples/istio/istio-demo.yaml 0xc420dd0220 20237 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "istio-sidecar-injector" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"istio":"sidecar-injector"}:selector
does not match templatelabels
Error from server (Invalid): error when applying patch: {"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"istio-tracing\",\"chart\":\"tracing-1.0.1\",\"heritage\":\"Tiller\",\"release\":\"RELEASE-NAME\"},\"name\":\"istio-tracing\",\"namespace\":\"istio-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"jaeger\"}},\"template\":{\"metadata\":{\"annotations\":{\"scheduler.alpha.kubernetes.io/critical-pod\":\"\",\"sidecar.istio.io/inject\":\"false\"},\"labels\":{\"app\":\"jaeger\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"ppc64le\"]}]},\"weight\":2},{\"preference\":{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"s390x\"]}]},\"weight\":2}],\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"beta.kubernetes.io/arch\",\"operator\":\"In\",\"values\":[\"amd64\",\"ppc64le\",\"s390x\"]}]}]}}},\"containers\":[{\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"COLLECTOR_ZIPKIN_HTTP_PORT\",\"value\":\"9411\"},{\"name\":\"MEMORY_MAX_TRACES\",\"value\":\"50000\"}],\"image\":\"docker.io/jaegertracing/all-in-one:1.5\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/\",\"port\":16686}},\"name\":\"jaeger\",\"ports\":[{\"containerPort\":9411},{\"containerPort\":16686},{\"containerPort\":5775,\"protocol\":\"UDP\"},{\"containerPort\":6831,\"protocol\":\"UDP\"},{\"containerPort\":6832,\"protocol\":\"UDP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/\",\"port\":16686}},\"resources\":{\"requests\":{\"cpu\":\"10m\"}}}]}}}}\n"},"labels":{"chart":"tracing-1.0.1","release":"RELEASE-NAME","version":null}},"spec":{"template":{"metadata":{"annotations":{"prometheus.io/port":null,"prometheus.io/scrape":null},"labels":{"version":null}},"spec":{"$setElementOrder/containers":[{"name":"jaeger"}],"containers":[{"image":"docker.io/jaegertracing/all-in-one:1.5","name":"jaeger"}]}}}} to: &{0xc42111c840 0xc420631880 istio-system istio-tracing samples/istio/istio-demo.yaml 0xc4204f03d0 20145 false} for: "samples/istio/istio-demo.yaml": Deployment.apps "istio-tracing" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"app":"jaeger"}:selector
does not match templatelabels
Brs, gowrisankar