Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Oathkeeper tries to install CRDs even when maester is disabled #250

Open
r3sdev opened this issue Apr 22, 2021 · 8 comments
Open

Oathkeeper tries to install CRDs even when maester is disabled #250

r3sdev opened this issue Apr 22, 2021 · 8 comments
Assignees
Labels
bug Something is not working.

Comments

@r3sdev
Copy link

r3sdev commented Apr 22, 2021

Describe the bug

When setting maester.enabled=false Oathkeeper stills wants to install CRDs.

To Reproduce

Steps to reproduce the behavior:

Edit values.yaml or use --set

Expected behavior

I expected CRDs not be installed.

Environment

  • Helm: version.BuildInfo{Version:"v3.5.3", GitCommit:"041ce5a2c17a58be0fcd5f5e16fb3e7e95fea622", GitTreeState:"dirty", GoVersion:"go1.16"}
  • Environment: MacOS 11.2.3

Additional context

Cloning this repo and manually removing maester.tgz from the charts folder allowed me to deploy.

@aeneasr
Copy link
Member

aeneasr commented Apr 22, 2021

What chart version are you using?

@aeneasr aeneasr added the bug Something is not working. label Apr 22, 2021
@r3sdev
Copy link
Author

r3sdev commented Apr 22, 2021

What chart version are you using?

0.7.0

@Demonsthere
Copy link
Collaborator

Hello there
I'm trying to reproduce the issue by installing the chart from my local repo:

 helm install oathkeeper ./helm/charts/oathkeeper -f local/oathkeeper.yaml --debug
 cat local/oathkeeper.yaml
---
maester:
  enabled: false
demo: true

In the result I see that, you are right, the CRDs are installed, which is a result of #235 and moving them to the crds folder. However, I don't see the controller installed, only its CRDs.

@r3sdev
Copy link
Author

r3sdev commented Apr 22, 2021

The CRDs is what was giving me the issue, since I'm not a cluster-admin trying to install gave me an error.
I have updated the issue

@r3sdev r3sdev changed the title Oathkeeper tries to install maester even when disabled Oathkeeper tries to install CRDs even when maester is disabled Apr 22, 2021
@Demonsthere
Copy link
Collaborator

I see, after some looking around, it seems this is a known helm bug

@aeneasr
Copy link
Member

aeneasr commented Apr 25, 2021

Right, I remember. I don’t think there’s a workaround - the upstream issue has not seen progress so this is a cantfix for us :/

@Demonsthere
Copy link
Collaborator

The workaround was to have the CRDs be installed in a different way, as we had before. However, that came with its own problems :<. TBH there isn't a Good way to do it :/

@aeneasr
Copy link
Member

aeneasr commented Apr 25, 2021

Yeah, maybe it's time to move to a jsonnet approach at some point...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something is not working.
Projects
None yet
Development

No branches or pull requests

3 participants