spec.auth.fileRealm rejected by admission webhook in eck-operator 1.4

[Tihomir_Plachkov]

master version: 1.16.15-gke.7800
node version: 1.15.12-gke.20
kubectl apply test.yaml

Error from server (Elasticsearch.elasticsearch.k8s.elastic.co "elasticsearch-sample" is invalid: auth: Invalid value: "auth": auth field found in the kubectl.kubernetes.io/last-applied-configuration annotation is unknown. This is often due to incorrect indentation in the manifest.): error when creating "test.yaml": admission webhook "elastic-es-validation-v1beta1.k8s.elastic.co" denied the request: Elasticsearch.elasticsearch.k8s.elastic.co "elasticsearch-sample" is invalid: auth: Invalid value: "auth": auth field found in the kubectl.kubernetes.io/last-applied-configuration annotation is unknown. This is often due to incorrect indentation in the manifest.

I've taken the manifest in test.yaml from the official eck documentation at

Users and roles | Elastic Cloud on Kubernetes [1.4] | Elastic

It works with 1.3 eck operator.

[pebrc (Peter Brachwitz)]

Did you by any chance install ECK via Helm? If so you might be hitting an issue with the validating webhook where the webhook for the v1beta1 API version validates your request where the file realm support was not present yet.

A workaround is outlined here Elastic Search, not able to modify the settings - #5 by charith-elastic

We will also update our documentation to call out the issue and ship a fix for the Helm chart as soon as possible.

[Tihomir_Plachkov]

Yes, ECK has been installed via helm.