Unable to create CRD's of constraints and constraintTemplates while deploying Gatekeeper through Helm #3457
Comments
debug logs from terraform apply`2024-07-22T12:48:00.997Z [INFO] provider.terraform-provider-helm_v2.12.1_x5: 2024/07/22 12:48:00 [DEBUG] [INFO] GetHelmConfiguration success: timestamp=2024-07-22T12:48:00.997Z
|
|
Bumping this for some traction !! |
|
This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs. Thank you for your contributions. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
What steps did you take and what happened:
Deploying gatekeeper using helm and terraform plan runs fine but the apply fails with below error :
` Error: 2 errors occurred:
│ * MutatingWebhookConfiguration in version "v1" cannot be handled as a MutatingWebhookConfiguration: json: cannot unmarshal array into Go struct field LabelSelectorRequirement.webhooks.namespaceSelector.matchExpressions.values of type string
│ * ValidatingWebhookConfiguration in version "v1" cannot be handled as a ValidatingWebhookConfiguration: json: cannot unmarshal array into Go struct field LabelSelectorRequirement.webhooks.namespaceSelector.matchExpressions.values of type string
│ with helm_release.gatekeeper[0],
│ on gatekeeper.tf line 24, in resource "helm_release" "gatekeeper":
│ 24: resource "helm_release" "gatekeeper" {`
Here is the gatekeeper.tf :
`resource "helm_release" "gatekeeper" {
name = "gatekeeper"
version = var.gatekeeper_chart_version
also tried version = "v3.15.1"
set_list {
name = "validatingWebhookExemptNamespacesLabels.kubernetes\.io/metadata.name"
value = var.exempted_namespaces
}
set_list {
name = "mutatingWebhookExemptNamespacesLabels.kubernetes\.io/metadata.name"
value = var.exempted_namespaces
}
set_list {
name = "controllerManager.exemptNamespaces"
value = var.exempted_namespaces
}
.... other set_lists for prometheus and also if any of the two Webhooks fail due to gatekeeper being unable.
}
`
Constraints are defined in seperate folders and read using the "kubernetes_manifest" resource.
What did you expect to happen:
terraform Plan should have failed if there was an error in the configuration variables being sent to the helm_release. However only apply fails.
** Steps taken **
Enabled debug logs and shall upload in ensuing updates.
Tried changing the helm provider version as well as gatekeeper chart version without luck.
Environment:
kubectl version):The text was updated successfully, but these errors were encountered: