[Bug]: Install failed to install CRD crds/049-Crd-kafkarebalance.yaml #11572

pointoneseven · 2025-06-20T16:21:07Z

pointoneseven
Jun 20, 2025

Bug Description

helm install fails with error:

Error: INSTALLATION FAILED: failed to install CRD crds/049-Crd-kafkarebalance.yaml: 1 error occurred:
	* <html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html> (post customresourcedefinitions.apiextensions.k8s.io)

Steps to reproduce

With proper kube config run:

helm install strimzi strimzi/strimzi-kafka-operator

Install begins then fails with 403 forbidden error.

Expected behavior

Expected helm install of Kafka operator.

Strimzi version

0.46.0

Kubernetes version

kubernetes v1.31.6

Installation method

helm chart

Infrastructure

AWS EC2

Configuration files and logs

No response

Additional context

No other kubectl commands or other helm installs fail.

scholzj · 2025-06-20T16:23:49Z

scholzj
Jun 20, 2025
Maintainer

Sounds like you probably missing some rights to install Strimzi? In this case maybe the rights to create the CRDs?

0 replies

pointoneseven · 2025-06-20T17:02:02Z

pointoneseven
Jun 20, 2025
Author

No issues with permissions as far as I can tell. Tested like this:

k apply -f example-crd.yml 
customresourcedefinition.apiextensions.k8s.io/customconfigmaps.test.com created

Debug logs:


client.go:142: [debug] creating 1 resource(s)
Error: INSTALLATION FAILED: failed to install CRD crds/049-Crd-kafkarebalance.yaml: 1 error occurred:
	* <html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html> (post customresourcedefinitions.apiextensions.k8s.io)


helm.go:84: [debug] 1 error occurred:
	* <html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html> (post customresourcedefinitions.apiextensions.k8s.io)


failed to install CRD crds/049-Crd-kafkarebalance.yaml
helm.sh/helm/v3/pkg/action.(*Install).installCRDs
	helm.sh/helm/v3/pkg/action/install.go:171
helm.sh/helm/v3/pkg/action.(*Install).RunWithContext
	helm.sh/helm/v3/pkg/action/install.go:252
main.runInstall
	helm.sh/helm/v3/cmd/helm/install.go:310
main.newInstallCmd.func2
	helm.sh/helm/v3/cmd/helm/install.go:156
github.com/spf13/cobra.(*Command).execute
	github.com/spf13/cobra@v1.8.0/command.go:983
github.com/spf13/cobra.(*Command).ExecuteC
	github.com/spf13/cobra@v1.8.0/command.go:1115
github.com/spf13/cobra.(*Command).Execute
	github.com/spf13/cobra@v1.8.0/command.go:1039
main.main
	helm.sh/helm/v3/cmd/helm/helm.go:83
runtime.main
	runtime/proc.go:271
runtime.goexit
	runtime/asm_arm64.s:1222
INSTALLATION FAILED
main.newInstallCmd.func2
	helm.sh/helm/v3/cmd/helm/install.go:158
github.com/spf13/cobra.(*Command).execute
	github.com/spf13/cobra@v1.8.0/command.go:983
github.com/spf13/cobra.(*Command).ExecuteC
	github.com/spf13/cobra@v1.8.0/command.go:1115
github.com/spf13/cobra.(*Command).Execute
	github.com/spf13/cobra@v1.8.0/command.go:1039
main.main
	helm.sh/helm/v3/cmd/helm/helm.go:83
runtime.main
	runtime/proc.go:271
runtime.goexit
	runtime/asm_arm64.s:1222

0 replies

pointoneseven · 2025-06-20T17:26:37Z

pointoneseven
Jun 20, 2025
Author

After some debug, which I should have done first, seems there's some WAF rules causing issues with the methods the install is using:

I0620 13:08:03.476334    3756 round_trippers.go:587]     Server: awselb/2.0
I0620 13:08:03.476357    3756 helper.go:246] "Response Body" body=<
	<html>
	<head><title>403 Forbidden</title></head>
	<body>
	<center><h1>403 Forbidden</h1></center>
	</body>
	</html>
 >

Modified my hosts file to bypass the ALB and it worked. In case anyone else has the same issue I did, ask if there's any WAF rules preventing types of POST actions.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Strimzi

[Bug]: Install failed to install CRD crds/049-Crd-kafkarebalance.yaml #11572

Uh oh!

{{title}}

Uh oh!

Replies: 3 comments

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Strimzi

[Bug]: Install failed to install CRD crds/049-Crd-kafkarebalance.yaml #11572

Uh oh!

pointoneseven Jun 20, 2025

Bug Description

Steps to reproduce

Expected behavior

Strimzi version

Kubernetes version

Installation method

Infrastructure

Configuration files and logs

Additional context

Replies: 3 comments

Uh oh!

scholzj Jun 20, 2025 Maintainer

Uh oh!

pointoneseven Jun 20, 2025 Author

Uh oh!

pointoneseven Jun 20, 2025 Author

pointoneseven
Jun 20, 2025

scholzj
Jun 20, 2025
Maintainer

pointoneseven
Jun 20, 2025
Author

pointoneseven
Jun 20, 2025
Author