Skip to content

Oathkeeper tries to install CRDs even when maester is disabled #250

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
codesavvy-nl opened this issue Apr 22, 2021 · 8 comments
Open

Oathkeeper tries to install CRDs even when maester is disabled #250

codesavvy-nl opened this issue Apr 22, 2021 · 8 comments
Assignees
Labels
bug Something is not working.

Comments

@codesavvy-nl
Copy link

codesavvy-nl commented Apr 22, 2021

Describe the bug

When setting maester.enabled=false Oathkeeper stills wants to install CRDs.

To Reproduce

Steps to reproduce the behavior:

Edit values.yaml or use --set

Expected behavior

I expected CRDs not be installed.

Environment

  • Helm: version.BuildInfo{Version:"v3.5.3", GitCommit:"041ce5a2c17a58be0fcd5f5e16fb3e7e95fea622", GitTreeState:"dirty", GoVersion:"go1.16"}
  • Environment: MacOS 11.2.3

Additional context

Cloning this repo and manually removing maester.tgz from the charts folder allowed me to deploy.

@aeneasr
Copy link
Member

aeneasr commented Apr 22, 2021

What chart version are you using?

@aeneasr aeneasr added the bug Something is not working. label Apr 22, 2021
@codesavvy-nl
Copy link
Author

What chart version are you using?

0.7.0

@Demonsthere
Copy link
Collaborator

Hello there
I'm trying to reproduce the issue by installing the chart from my local repo:

 helm install oathkeeper ./helm/charts/oathkeeper -f local/oathkeeper.yaml --debug
 cat local/oathkeeper.yaml
---
maester:
  enabled: false
demo: true

In the result I see that, you are right, the CRDs are installed, which is a result of #235 and moving them to the crds folder. However, I don't see the controller installed, only its CRDs.

@codesavvy-nl
Copy link
Author

codesavvy-nl commented Apr 22, 2021

The CRDs is what was giving me the issue, since I'm not a cluster-admin trying to install gave me an error.
I have updated the issue

@codesavvy-nl codesavvy-nl changed the title Oathkeeper tries to install maester even when disabled Oathkeeper tries to install CRDs even when maester is disabled Apr 22, 2021
@Demonsthere
Copy link
Collaborator

I see, after some looking around, it seems this is a known helm bug

@aeneasr
Copy link
Member

aeneasr commented Apr 25, 2021

Right, I remember. I don’t think there’s a workaround - the upstream issue has not seen progress so this is a cantfix for us :/

@Demonsthere
Copy link
Collaborator

The workaround was to have the CRDs be installed in a different way, as we had before. However, that came with its own problems :<. TBH there isn't a Good way to do it :/

@aeneasr
Copy link
Member

aeneasr commented Apr 25, 2021

Yeah, maybe it's time to move to a jsonnet approach at some point...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something is not working.
Projects
None yet
Development

No branches or pull requests

3 participants