istioctl install display warning messages when using external profile #40019
Description
Bug Description
When using external profile to install istio, the following warning message will be displayed
2022-07-20T16:48:59.975370Z warn installer retrieving resources to prune type networking.istio.io/v1alpha3, Kind=DestinationRule: no matches for kind "DestinationRule" in version "networking.istio.io/v1alpha3"
2022-07-20T16:48:59.987489Z warn installer retrieving resources to prune type networking.istio.io/v1alpha3, Kind=EnvoyFilter: no matches for kind "EnvoyFilter" in version "networking.istio.io/v1alpha3"
2022-07-20T16:49:00.225277Z warn installer retrieving resources to prune type networking.istio.io/v1alpha3, Kind=Gateway: no matches for kind "Gateway" in version "networking.istio.io/v1alpha3"
2022-07-20T16:49:00.864999Z warn installer retrieving resources to prune type networking.istio.io/v1alpha3, Kind=VirtualService: no matches for kind "VirtualService" in version "networking.istio.io/v1alpha3"
2022-07-20T16:49:01.507141Z warn installer retrieving resources to prune type security.istio.io/v1beta1, Kind=PeerAuthentication: no matches for kind "PeerAuthentication" in version "security.istio.io/v1beta1"
The problem is that when an install includes no istio base, Istio crds wont be installed, but the pruning process was trying to locate resources such as DestinationRule, EnvoyFilter etc, of course these CRDs were never even installed, removing the resources not included in the manifest will produce this very annoying warnings.
Version
$ istioctl version
no running Istio pods in "istio-system"
1.14.1
$ kubectl version --short
Client Version: v1.23.7
Server Version: v1.23.4
Additional Information
The problem happens on latest, 1.14, 1.13 version of Istioctl as well.
The process to reproduce the problem.
Have a clean k8s system, then run the following command.
cat <<EOF | istioctl install -y -f -
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
profile: external
values:
global:
remotePilotAddress: 14.24.34.54
istiodRemote:
injectionPath: /inject/cluster/cluster2/net/network1
EOF