Skip to content

Crossplane

By enabling this toolset, HolmesGPT will be able to troubleshoot Crossplane-managed infrastructure by inspecting providers, compositions, claims, composite resources, and managed resources across the full resource hierarchy.

Prerequisites

Crossplane must be installed on your Kubernetes cluster. HolmesGPT uses kubectl to query Crossplane custom resources, so no additional CLI tools are required.

HolmesGPT needs read access to Crossplane CRDs. If you use Kubernetes RBAC, ensure the service account has permissions to get and list the following API groups:

# Add to your ClusterRole
- apiGroups: ["pkg.crossplane.io"]
  resources: ["providers", "providerrevisions"]
  verbs: ["get", "list"]
- apiGroups: ["apiextensions.crossplane.io"]
  resources: ["compositeresourcedefinitions", "compositions"]
  verbs: ["get", "list"]
# For managed resources, add the specific API groups used by your providers.
# Example for AWS provider:
- apiGroups: ["s3.aws.upbound.io", "rds.aws.upbound.io", "ec2.aws.upbound.io"]
  resources: ["*"]
  verbs: ["get", "list"]

Configuration

Add the following to ~/.holmes/config.yaml. Create the file if it doesn't exist:

toolsets:
    crossplane/core:
        enabled: true

After making changes to your configuration, run:

holmes toolset refresh

To test, run:

holmes ask "Which Crossplane managed resources are failing and why?"

When using the standalone Holmes Helm Chart, update your values.yaml:

customClusterRoleRules:
    - apiGroups: ["pkg.crossplane.io"]
      resources: ["providers", "providerrevisions"]
      verbs: ["get", "list"]
    - apiGroups: ["apiextensions.crossplane.io"]
      resources: ["compositeresourcedefinitions", "compositions"]
      verbs: ["get", "list"]
toolsets:
    crossplane/core:
        enabled: true

Apply the configuration:

helm upgrade holmes robusta/holmes -f values.yaml

When using the Robusta Helm Chart (which includes HolmesGPT), update your generated_values.yaml:

holmes:
  customClusterRoleRules:
      - apiGroups: ["pkg.crossplane.io"]
        resources: ["providers", "providerrevisions"]
        verbs: ["get", "list"]
      - apiGroups: ["apiextensions.crossplane.io"]
        resources: ["compositeresourcedefinitions", "compositions"]
        verbs: ["get", "list"]
  toolsets:
      crossplane/core:
          enabled: true

Apply the configuration:

helm upgrade robusta robusta/robusta -f generated_values.yaml --set clusterName=<YOUR_CLUSTER_NAME>

Common Use Cases

holmes ask "Which Crossplane managed resources are failing and why?"

holmes ask "Are all Crossplane providers healthy?"

holmes ask "Trace the claim my-database in namespace production and find which managed resource is broken"

holmes ask "Why is my S3 bucket not becoming ready?"