{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/", "item": { "id": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/", "slug": "do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee", "url": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee.md", "json": "https://update.dsesecurity.com/api/v1/posts/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/" }, "title": "Do not treat a Kubernetes disruption budget as an outage guarantee", "summary": "An eviction safeguard has a narrower boundary than application availability.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-10-20T18:14:42+00:00", "modified_at": "2026-10-20T18:34:31+00:00", "reviewed_on": "2026-10-20", "reading_minutes": 2, "word_count": 254, "potentially_affected": "Review the PDB boundary for voluntary eviction, involuntary unavailability and application updates.", "dse_recommendation": "DSE recommends listing every maintenance action used by the cluster team and identifying whether it uses the eviction API.", "primary_source": { "name": "Kubernetes documentation — Disruptions", "url": "https://kubernetes.io/docs/concepts/workloads/pods/disruptions/", "published_on": null, "authority": "kubernetes.io" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

An eviction safeguard has a narrower boundary than application availability.

\n

Source facts

\n

A Kubernetes PodDisruptionBudget limits simultaneous unavailability during supported voluntary disruptions of a replicated application. It cannot prevent involuntary failures, though those failures count against the budget. Deleting Pods or their Deployment bypasses the budget. Workload rolling upgrades also are not limited by the PDB; their rollout behavior is controlled by the workload resource.

\n

Source: Kubernetes documentation — Disruptions.

\n

Applicability

\n

Review the PDB boundary for voluntary eviction, involuntary unavailability and application updates.

\n

DSE recommendation

\n

DSE recommends listing every maintenance action used by the cluster team and identifying whether it uses the eviction API. Document the application’s actual minimum healthy capacity, then align its budget and rollout settings with that requirement. Include node loss and direct deletion in the risk review instead of assuming they are blocked. Make the maintenance runbook identify who can resolve a blocked eviction and what business approval is needed before accepting reduced capacity. A budget should express a deliberate operational constraint, not merely satisfy a configuration checklist.

\n

Verification

\n

During a controlled maintenance exercise, compare an eviction request with an application rollout and a simulated unavailable replica. Observe the budget’s allowed disruptions and the workload’s ready replicas. Do not perform destructive availability tests on an unapproved production workload. Require the exercise report to name the operation used, not just say that maintenance succeeded. Reconcile any unexpected eviction result with the controller’s desired replica count and the ready capacity at that moment.

\n

Official reference

\n

Kubernetes documentation — Disruptions. Reviewed October 20, 2026.

", "content_text": "An eviction safeguard has a narrower boundary than application availability.\nSource facts\nA Kubernetes PodDisruptionBudget limits simultaneous unavailability during supported voluntary disruptions of a replicated application. It cannot prevent involuntary failures, though those failures count against the budget. Deleting Pods or their Deployment bypasses the budget. Workload rolling upgrades also are not limited by the PDB; their rollout behavior is controlled by the workload resource.\nSource: Kubernetes documentation — Disruptions.\nApplicability\nReview the PDB boundary for voluntary eviction, involuntary unavailability and application updates.\nDSE recommendation\nDSE recommends listing every maintenance action used by the cluster team and identifying whether it uses the eviction API. Document the application’s actual minimum healthy capacity, then align its budget and rollout settings with that requirement. Include node loss and direct deletion in the risk review instead of assuming they are blocked. Make the maintenance runbook identify who can resolve a blocked eviction and what business approval is needed before accepting reduced capacity. A budget should express a deliberate operational constraint, not merely satisfy a configuration checklist.\nVerification\nDuring a controlled maintenance exercise, compare an eviction request with an application rollout and a simulated unavailable replica. Observe the budget’s allowed disruptions and the workload’s ready replicas. Do not perform destructive availability tests on an unapproved production workload. Require the exercise report to name the operation used, not just say that maintenance succeeded. Reconcile any unexpected eviction result with the controller’s desired replica count and the ready capacity at that moment.\nOfficial reference\nKubernetes documentation — Disruptions. Reviewed October 20, 2026.", "content_markdown": "An eviction safeguard has a narrower boundary than application availability.\n\n## Source facts\n\nA Kubernetes PodDisruptionBudget limits simultaneous unavailability during supported voluntary disruptions of a replicated application. It cannot prevent involuntary failures, though those failures count against the budget. Deleting Pods or their Deployment bypasses the budget. Workload rolling upgrades also are not limited by the PDB; their rollout behavior is controlled by the workload resource.\n\nSource: [Kubernetes documentation — Disruptions](https://kubernetes.io/docs/concepts/workloads/pods/disruptions/).\n\n## Applicability\n\nReview the PDB boundary for voluntary eviction, involuntary unavailability and application updates.\n\n## DSE recommendation\n\nDSE recommends listing every maintenance action used by the cluster team and identifying whether it uses the eviction API. Document the application’s actual minimum healthy capacity, then align its budget and rollout settings with that requirement. Include node loss and direct deletion in the risk review instead of assuming they are blocked. Make the maintenance runbook identify who can resolve a blocked eviction and what business approval is needed before accepting reduced capacity. A budget should express a deliberate operational constraint, not merely satisfy a configuration checklist.\n\n## Verification\n\nDuring a controlled maintenance exercise, compare an eviction request with an application rollout and a simulated unavailable replica. Observe the budget’s allowed disruptions and the workload’s ready replicas. Do not perform destructive availability tests on an unapproved production workload. Require the exercise report to name the operation used, not just say that maintenance succeeded. Reconcile any unexpected eviction result with the controller’s desired replica count and the ready capacity at that moment.\n\n## Official reference\n\n[Kubernetes documentation — Disruptions](https://kubernetes.io/docs/concepts/workloads/pods/disruptions/). Reviewed October 20, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/", "url": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-20" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "IT", "item": "https://update.dsesecurity.com/topic/it/" }, { "@type": "ListItem", "position": 3, "name": "Do not treat a Kubernetes disruption budget as an outage guarantee", "item": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/#article", "identifier": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/", "url": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/", "headline": "Do not treat a Kubernetes disruption budget as an outage guarantee", "description": "An eviction safeguard has a narrower boundary than application availability.", "abstract": "An eviction safeguard has a narrower boundary than application availability.", "articleBody": "An eviction safeguard has a narrower boundary than application availability.\nSource facts\nA Kubernetes PodDisruptionBudget limits simultaneous unavailability during supported voluntary disruptions of a replicated application. It cannot prevent involuntary failures, though those failures count against the budget. Deleting Pods or their Deployment bypasses the budget. Workload rolling upgrades also are not limited by the PDB; their rollout behavior is controlled by the workload resource.\nSource: Kubernetes documentation — Disruptions.\nApplicability\nReview the PDB boundary for voluntary eviction, involuntary unavailability and application updates.\nDSE recommendation\nDSE recommends listing every maintenance action used by the cluster team and identifying whether it uses the eviction API. Document the application’s actual minimum healthy capacity, then align its budget and rollout settings with that requirement. Include node loss and direct deletion in the risk review instead of assuming they are blocked. Make the maintenance runbook identify who can resolve a blocked eviction and what business approval is needed before accepting reduced capacity. A budget should express a deliberate operational constraint, not merely satisfy a configuration checklist.\nVerification\nDuring a controlled maintenance exercise, compare an eviction request with an application rollout and a simulated unavailable replica. Observe the budget’s allowed disruptions and the workload’s ready replicas. Do not perform destructive availability tests on an unapproved production workload. Require the exercise report to name the operation used, not just say that maintenance succeeded. Reconcile any unexpected eviction result with the controller’s desired replica count and the ready capacity at that moment.\nOfficial reference\nKubernetes documentation — Disruptions. Reviewed October 20, 2026.", "datePublished": "2026-10-20T18:14:42+00:00", "dateModified": "2026-10-20T18:34:31+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/do-not-treat-a-kubernetes-disruption-budget-as-an-outage-guarantee/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Do not treat a Kubernetes disruption budget as an outage guarantee" }, "articleSection": [ "IT", "Networks & Infrastructure" ], "keywords": [ "IT", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 254, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Kubernetes documentation — Disruptions", "url": "https://kubernetes.io/docs/concepts/workloads/pods/disruptions/" } } ] } }