Two of the CRDs included in the VPA operator's manifests are getting flagged with conditions when installed. VerticalPodAutoscaler is getting these: - type: NonStructuralSchema status: 'True' lastTransitionTime: '2020-03-30T19:50:27Z' reason: Violations message: >- spec.validation.openAPIV3Schema.type: Required value: must not be empty at the root - type: KubernetesAPIApprovalPolicyConformant status: 'False' lastTransitionTime: '2020-03-30T19:50:27Z' reason: MissingAnnotation message: >- protected groups must have approval annotation "api-approved.kubernetes.io", see https://github.com/kubernetes/enhancements/pull/1111 VerticalPodAutoscalerCheckpoint is getting: - type: KubernetesAPIApprovalPolicyConformant status: 'False' lastTransitionTime: '2020-03-30T19:50:27Z' reason: MissingAnnotation message: >- protected groups must have approval annotation "api-approved.kubernetes.io", see https://github.com/kubernetes/enhancements/pull/1111
Regarding KubernetesAPIApprovalPolicyConformant, both VerticalPodAutoscaler and VerticalPodAutoscalerCheckpoint are upstream API groups and I wasn't readily able to find any PRs that reference API review. I'll bring it up in sig-autoscaling. The NonStructuralSchema error should be fixed by https://github.com/openshift/vertical-pod-autoscaler-operator/pull/12
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2409