Skip to content

Remove third-party CRDs from charts; add crd-manager - #1358

Merged
ArnobKumarSaha merged 1 commit into
masterfrom
arnob-crd-manager
Oct 2, 2026
Merged

ArnobKumarSaha merged 1 commit into
masterfrom
arnob-crd-manager

Conversation

@ArnobKumarSaha

Copy link
Copy Markdown
Member

Charts no longer bundle copies of third-party CRDs. Under Flux CreateReplace, those copies overwrote vendor-managed CRDs (OpenShift, GKE, NKP, …).

Removed CRD copies

  • ace-installer: Flux HelmRelease, HelmRepository (Flux is a prerequisite)
  • opscenter-features: Flux HelmRepository
  • catalog-manager: EnvoyProxy (never rendered)
  • license-proxyserver: ServiceMonitor
  • service-gateway: cert-manager Certificate/Issuer/ClusterIssuer, EnvoyProxy, Gateway API GatewayClass/Gateway/HTTPRoute

import-crds.sh no longer imports them.

Capabilities gating
license-proxyserver ServiceMonitor and every service-gateway object of these kinds now also require .Capabilities.APIVersions.Has "<group>/<version>/<Kind>". When the CRDs are present, helm template output is the same as master (apart from random certs).

crd-manager

  • New charts/crd-manager (pre-install/upgrade hook Job, image ghcr.io/appscode/crd-manager), from https://github.com/appscode-cloud/crd-manager.
  • It only creates CRDs that are missing, waits until they're ready, and never updates or deletes an existing one. Feature gates: CertManager, EnvoyGateway, GatewayAPI, PrometheusOperator.
  • ace-installer deploys it as HelmRelease crd-manager from the bootstrap repo, and opscenter-features depends on it, so every other release runs after it.

Before merge

  • make gen (zz_generated.deepcopy.go, crd-manager values.openapiv3_schema.yaml + README, ace-installer README)
  • Regenerate ace-installer-certified{,-crds} with chart-packer
  • Release crd-manager image v0.0.1 (ct for charts/crd-manager fails until then)

@ArnobKumarSaha
ArnobKumarSaha force-pushed the arnob-crd-manager branch 5 times, most recently from 3c795d2 to 90fc848 Compare October 2, 2026 05:20
@ArnobKumarSaha
ArnobKumarSaha force-pushed the arnob-crd-manager branch 3 times, most recently from 87bb691 to c7401c7 Compare October 2, 2026 06:48
Third-party CRD copies (cert-manager, ServiceMonitor, Gateway API, Envoy
Gateway, Flux) are dropped from chart crds/ dirs. Objects of those kinds
are now gated on .Capabilities.APIVersions.Has. A new crd-manager chart,
deployed by ace-installer before opscenter-features, creates the missing
CRDs without overwriting vendor-managed copies.

Signed-off-by: Arnob Kumar Saha <arnob@appscode.com>
@ArnobKumarSaha
ArnobKumarSaha merged commit 3045ef1 into master Oct 2, 2026
8 checks passed
@ArnobKumarSaha
ArnobKumarSaha deleted the arnob-crd-manager branch October 2, 2026 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant