Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[bitnami/external-dns] External-DNS Chart Broken with 7.3.3 due to removal of protected CRD group annotation #25967

Closed
pinkfloydx33 opened this issue May 17, 2024 · 52 comments · Fixed by #29266
Assignees
Labels
external-dns solved tech-issues The user has a technical issue about an application

Comments

@pinkfloydx33
Copy link

pinkfloydx33 commented May 17, 2024

Name and Version

bitnami/external-dns

What architecture are you using?

None

What steps will reproduce the bug?

Attempt to upgrade or install the external-dns chart at version 7.3.3. In our case, an automated upgrade via Flux has started spamming alerts across all of our environments where minor/patch upgrades are automatically performed.

What is the expected behavior?

Helm chart upgrades/installs

What do you see instead?

Installation fails with:

Helm upgrade failed: cannot patch "dnsendpoints.externaldns.k8s.io" with kind CustomResourceDefinition: CustomResourceDefinition.apiextensions.k8s.io "dnsendpoints.externaldns.k8s.io" is invalid: metadata.annotations[api-approved.kubernetes.io]: Required value: protected groups must have approval annotation "api-approved.kubernetes.io", see kubernetes/enhancements#1111

Additional information

This is because the automated upgrade has removed the protected annotation on the CRDs:

This annotation is required on CRDs if the group is k8s.io, kubernetes.io, or ends with .k8s.io, .kubernetes.io which is applicable here because the CRD group is apiextensions.k8s.io.

This change needs to be reverted or else the chart is unusable.

@pinkfloydx33 pinkfloydx33 added the tech-issues The user has a technical issue about an application label May 17, 2024
@github-actions github-actions bot added the triage Triage is needed label May 17, 2024
@carrodher
Copy link
Member

Thank you for bringing this issue to our attention. We appreciate your involvement! If you're interested in contributing a solution, we welcome you to create a pull request. The Bitnami team is excited to review your submission and offer feedback. You can find the contributing guidelines here.

Your contribution will greatly benefit the community. Feel free to reach out if you have any questions or need assistance.

@pinkfloydx33
Copy link
Author

@carrodher I wouldn't know where to begin as the original change was made by some form of automation, which tells me that it too would need to be fixed. I also unfortunately need approval from my company before contributing, even to tools we use, and that would likely take more time than others broken by this change would appreciate.

@andeke07
Copy link

I have added the annotation to the pull request on the original external-dns project, I believe this is where the Bitnami automation gets its information from so if this gets approved hopefully the next release will contain it again?

@andeke07
Copy link

This has been fixed now with kubernetes-sigs/external-dns@f46676f

I don't know the next steps though, I suppose a release needs to be done and then the bitnami chart updated to refer to the new release?

@rouke-broersma
Copy link
Contributor

I think the release of such updates is automated, not sure how they are triggered but I expect that it will come within a reasonable time.

@carrodher
Copy link
Member

carrodher commented May 21, 2024

Our automation looks for new releases at https://github.com/kubernetes-incubator/external-dns. When a new release is cut there, our automated test & release process is triggered. As part of that process, the upstream CRDs are compared and the ones in the Bitnami chart are updated to match the upstream, i.e 375ee3b

@herrbpl
Copy link

herrbpl commented May 22, 2024

Still broken in 7.5.0

@andeke07
Copy link

external-dns hasn't issued a new release yet so there's nothing for the new chart to go off of

@raiomarco
Copy link

So... there's a fix? a workaround? if not, what version of the chart should i use? i tried the 7.5.2 but it didn't work :(

@cheinema
Copy link

@raiomarco Since the problem seems to have occurred starting with chart version 7.3.3, v7.3.2 should be the last stable version for now. We are still waiting for a new release in https://github.com/kubernetes-sigs/external-dns to include the fix.

@MaxAnderson95
Copy link

@cheinema Unless I'm missing something, the v0.14.2 release appears to have the fix. Is there anything else that needs to be done before merging the fix into the chart?

@rouke-broersma
Copy link
Contributor

@cheinema Unless I'm missing something, the v0.14.2 release appears to have the fix. Is there anything else that needs to be done before merging the fix into the chart?

You're looking at the external dns helm chart managed by external dns. This is not the source of crds for the bitnami chart.

@MaxAnderson95
Copy link

@rouke-broersma I knew I was missing something! Thanks.

@Atoms
Copy link
Contributor

Atoms commented Jun 14, 2024

so seems crd cannot be updated manually, as there is ci pipeline which allows only bitnami bot to update crd. and there is no release from external-dns side which would include api-approved annotation.

@pinkfloydx33
Copy link
Author

This chart is effectively broken for now... Does anyone have a way to workaround it or are we SOL for now?

@rouke-broersma
Copy link
Contributor

This chart is effectively broken for now... Does anyone have a way to workaround it or are we SOL for now?

I think you could simply deploy the required resources yourself (updated crd, clusterRole on crd, clusterRoleBinding to serviceaccount from chart): https://github.com/search?q=repo%3Abitnami%2Fcharts%20path%3A%2F%5Ebitnami%5C%2Fexternal-dns%5C%2Ftemplates%5C%2F%2F%20.Values.crd.create&type=code

That should be sufficient until upstream releases a new version.

@pinkfloydx33
Copy link
Author

Ok thanks. We use Flux for management, I'm sure theres a way to do that, just haven't looked into it yet. Hopefully the upstream fixes it soon...

@hawkesn
Copy link

hawkesn commented Jun 19, 2024

Still broken with 7.5.7

@andeke07
Copy link

@hawkesn the chart relies on external-dns coming out with another release which they haven't done in a month: https://github.com/kubernetes-sigs/external-dns/releases

The next time external-dns release, it will have the fix, which will then get embedded in this chart.

Copy link

github-actions bot commented Jul 5, 2024

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

@github-actions github-actions bot added the stale 15 days without activity label Jul 5, 2024
@MaxAnderson95
Copy link

Commenting to keep this issue open

fmulero added a commit that referenced this issue Aug 13, 2024
* Update crd.yaml
CRD doesn't work, this solving the problem ) 

* chore(CRD): Disable auto-update due to #25967

Signed-off-by: Fran Mulero <[email protected]>

---------

Signed-off-by: Aleksei Pashkin <[email protected]>
Signed-off-by: Bitnami Containers <[email protected]>
Signed-off-by: Carlos Rodríguez Hernández <[email protected]>
Signed-off-by: Fran Mulero <[email protected]>
Co-authored-by: Bitnami Containers <[email protected]>
Co-authored-by: Carlos Rodríguez Hernández <[email protected]>
Co-authored-by: juan131 <[email protected]>
Co-authored-by: Fran Mulero <[email protected]>
@venkatamutyala
Copy link

venkatamutyala commented Aug 15, 2024

Looks like we may have a fix. Anyone roll out >= 8.3.5 in production yet? :)

@rouke-broersma
Copy link
Contributor

I updated without issues

@javsalgar
Copy link
Contributor

Thanks for letting us know! Can we close this issue then?

@juan131 juan131 removed the triage Triage is needed label Aug 16, 2024
Copy link

github-actions bot commented Sep 1, 2024

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

@github-actions github-actions bot added the stale 15 days without activity label Sep 1, 2024
@venkatamutyala
Copy link

@javsalgar I think we need to revert the change once the upstream chart has been released?

@carrodher carrodher assigned javsalgar and unassigned carrodher and fmulero Sep 2, 2024
@javsalgar
Copy link
Contributor

Correct, when upstream releases, we can re-enable it.

@github-actions github-actions bot removed the stale 15 days without activity label Sep 3, 2024
@venkatamutyala
Copy link

@javsalgar it is time. :) A new release was dropped yesterday and appears to have the fix:

https://github.com/kubernetes-sigs/external-dns/releases/tag/v0.15.0

fix: re-add api-approved.kubernetes.io annotation by @morremeyer in https://github.com/kubernetes-sigs/external-dns/pull/4488

@javsalgar
Copy link
Contributor

Thanks for letting us know! I created a PR ⏫

Copy link

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

@github-actions github-actions bot added the stale 15 days without activity label Sep 22, 2024
@venkatamutyala
Copy link

Commenting so this issue doesn't fall stale. I think we are just waiting on #29266 to get merged.

@github-actions github-actions bot removed the stale 15 days without activity label Sep 23, 2024
Copy link

github-actions bot commented Oct 9, 2024

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

@github-actions github-actions bot added the stale 15 days without activity label Oct 9, 2024
@venkatamutyala
Copy link

Still a work in progress. Hasn't been merged it: #29266

@github-actions github-actions bot removed the stale 15 days without activity label Oct 11, 2024
Copy link

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

@github-actions github-actions bot added the stale 15 days without activity label Oct 27, 2024
@pinkfloydx33
Copy link
Author

Anti stale post. Still waiting on #29266

@github-actions github-actions bot removed the stale 15 days without activity label Oct 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
external-dns solved tech-issues The user has a technical issue about an application
Projects
None yet
Development

Successfully merging a pull request may close this issue.