Upgrading with helm from 2.0.1 to 2.1.1 doesn’t work because the CRDs do not get updated

[slonka]

What happened?

Reported via internal slack by @doctorwu.

[jakubdyszkiewicz]

I confirm the issue. MeshTrafficPermission CRD is not updated. After upgrade you can still see

$ kubectl get crd meshtrafficpermissions.kuma.io -oyaml | grep -i allow
                          - ALLOW
                          - ALLOW_WITH_SHADOW_DENY

instead of

$ kubectl get crd meshtrafficpermissions.kuma.io -oyaml | grep -i allow
                          - Allow
                          - AllowWithShadowDeny

[michaelbeaumont]

Sounds like kumactl install crds --only-missing isn't doing the right thing here? IIRC I think we have to use that Job because /crds in Helm doesn't support upgrades.

[jakubdyszkiewicz]

Yes. I'm testing if this kind of upgrade is even possible, and it seems it is.
I think we can just get rid of this --only-missing