crossplane-contrib / provider-kubernetes

Crossplane provider to provision and manage Kubernetes objects on (remote) Kubernetes clusters.
Apache License 2.0
140 stars 82 forks source link

Failed to install Provider on GKE cluster - cannot establich control of object: cannot deploy a CRD with webhook conversion strategy without having a TLS bundle #270

Closed gusfcarvalho closed 3 months ago

gusfcarvalho commented 3 months ago

What happened?

When installing the provider within a GKE cluster, it fails to install with the following error message:

Events:
  Type     Reason             Age                 From                                         Message
  ----     ------             ----                ----                                         -------
  Normal   BindClusterRole    23m (x6 over 30m)   rbac/providerrevision.pkg.crossplane.io      Bound system ClusterRole to provider ServiceAccount(s)
  Normal   ApplyClusterRoles  23m (x3 over 30m)   rbac/providerrevision.pkg.crossplane.io      Applied RBAC ClusterRoles
  Warning  SyncPackage        29s (x37 over 30m)  packages/providerrevision.pkg.crossplane.io  cannot establish control of object: cannot deploy a CRD with webhook conversion strategy without having a TLS bundle

I didn't find any documentation on how to troubleshoot it nor to fix it, as there isn't anything relevant on crossplane logs.

How can we reproduce it?

I just really installed provider in the cluster:

cat << EOF | kubectl apply -f -
apiVersion: pkg.crossplane.io/v1
kind: Provider
metadata:
  name: provider-kubernetes
spec:
  package: xpkg.upbound.io/crossplane-contrib/provider-kubernetes:v0.14.0
EOF

What environment did it happen in?

Crossplane version: v1.9.2

jbw976 commented 3 months ago

I just tried this scenario with crossplane v1.16.0, which worked OK for me. I see you're finding this issue with v1.9.2 which is a bit old and no longer a supported version: https://github.com/crossplane/crossplane?tab=readme-ov-file#releases

Would it be possible for you to try this scenario again with a newer version of Crossplane? πŸ™‡β€β™‚οΈ https://docs.crossplane.io/v1.16/software/install/

gusfcarvalho commented 3 months ago

Would it be possible for you to try this scenario again with a newer version of Crossplane? πŸ™‡β€β™‚οΈ https://docs.crossplane.io/v1.16/software/install/

If this is a version bump away, I'm more than happy to try it!

gusfcarvalho commented 3 months ago

Yup, on v1.16 it works. I feel ashamed for not trying this before opening an issue. Thanks for your time @jbw976!

jbw976 commented 3 months ago

Thank you very much for the initiative to report an issue you saw and the follow-up to try out the new version. That's really appreciated @gusfcarvalho! πŸ™‡β€β™‚οΈ πŸ™Œ