Skip to content

CRDs in main erroring when applied #5079

Closed
#5092
Closed
CRDs in main erroring when applied#5079
#5092
Labels
good first issueGood for newcomerskind/bugCategorizes issue or PR as related to a bug.kind/documentationCategorizes issue or PR as related to documentation.
@ivankatliarchuk

Description

@ivankatliarchuk
ivankatliarchuk
opened on Jul 29, 2025

Describe the bug

CRDs (bundle.yaml) from main branch error on apply. Expectations, should not error.
Discovered when smoke-testing changes #4984 against current and next CRDs version

To Reproduce
Steps to reproduce the behavior:

  1. provide all relevant manifests
  2. provide the Kubernetes and ESO version

Create a kind cluster

kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
name: local-dev
nodes:
- role: control-plane
  image: kindest/node:v1.32.0
- role: worker
  image: kindest/node:v1.32.0

Apply CRDs

kubeclt apply -f https://raw.githubusercontent.com/gofogo/external-secrets-fork/refs/heads/main/deploy/crds/bundle.yaml

customresourcedefinition.apiextensions.k8s.io/clusterexternalsecrets.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/clusterpushsecrets.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/externalsecrets.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/pushsecrets.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/acraccesstokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/clustergenerators.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/ecrauthorizationtokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/fakes.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/gcraccesstokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/generatorstates.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/githubaccesstokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/grafanas.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/mfas.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/passwords.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/quayaccesstokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/stssessiontokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/uuids.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/vaultdynamicsecrets.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/webhooks.generators.external-secrets.io created
Error from server (Invalid): error when creating "https://raw.githubusercontent.com/gofogo/external-secrets-fork/refs/heads/main/deploy/crds/bundle.yaml": CustomResourceDefinition.apiextensions.k8s.io "clustersecretstores.external-secrets.io" is invalid: metadata.annotations: Too long: may not be more than 262144 bytes
Error from server (Invalid): error when creating "https://raw.githubusercontent.com/gofogo/external-secrets-fork/refs/heads/main/deploy/crds/bundle.yaml": CustomResourceDefinition.apiextensions.k8s.io "secretstores.external-secrets.io" is invalid: metadata.annotations: Too long: may not be more than 262144 bytes

When version 0.18.2

> k apply -f https://raw.githubusercontent.com/external-secrets/external-secrets/refs/tags/v0.18.2/deploy/crds/bundle.yaml

# created on fresh
customresourcedefinition.apiextensions.k8s.io/clusterexternalsecrets.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/clusterpushsecrets.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/clustersecretstores.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/externalsecrets.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/pushsecrets.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/secretstores.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/acraccesstokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/clustergenerators.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/ecrauthorizationtokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/fakes.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/gcraccesstokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/generatorstates.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/githubaccesstokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/grafanas.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/mfas.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/passwords.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/quayaccesstokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/stssessiontokens.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/uuids.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/vaultdynamicsecrets.generators.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/webhooks.generators.external-secrets.io created

# applied on top
customresourcedefinition.apiextensions.k8s.io/clusterexternalsecrets.external-secrets.io configured
customresourcedefinition.apiextensions.k8s.io/clusterpushsecrets.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/clustersecretstores.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/externalsecrets.external-secrets.io configured
customresourcedefinition.apiextensions.k8s.io/pushsecrets.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/secretstores.external-secrets.io created
customresourcedefinition.apiextensions.k8s.io/acraccesstokens.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/clustergenerators.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/ecrauthorizationtokens.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/fakes.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/gcraccesstokens.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/generatorstates.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/githubaccesstokens.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/grafanas.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/mfas.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/passwords.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/quayaccesstokens.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/stssessiontokens.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/uuids.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/vaultdynamicsecrets.generators.external-secrets.io unchanged
customresourcedefinition.apiextensions.k8s.io/webhooks.generators.external-secrets.io unchanged

Expected behavior
Apply without error

Screenshots

Image

Additional context
Add any other context about the problem here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    good first issueGood for newcomerskind/bugCategorizes issue or PR as related to a bug.kind/documentationCategorizes issue or PR as related to documentation.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions