What happened?

My CRD property use the ServiceAccount type, When I use kubelet apply -f <crds> to create CRDs generated by controller-gen, get an error message:

Required value: this property is in x-kubernetes-list-map-keys, so it must have a default or be a required property.

This is because ServiceAccount.Secret.Name property is in x-kubernetes-list-map-keys, but it is not have a default and not be a required property.

Structure definition:

// +genclient
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
// +kubebuilder:...
type Foo struct {
    ServiceAccount corev1.ServiceAccount `json:"serviceAccount,omitempty"`
    ....
}

What did you expect to happen?

I expect to generate CRDs that can be created successfully.

Solutions:

• Set ObjectReference.Name to required. I think the name is required in most scenarios.
• Add default value annotations (//+default="" and //+kubebuilder:default="") for ObjectReference.Name.
• Modify the ServiceAccount.Secrets type to []SecretReference and set SecretReference.name to required.

How can we reproduce it (as minimally and precisely as possible)?

Refer to "What happened"

Anything else we need to know?

No response

Kubernetes version

Cloud provider

OS version

# On Linux:
$ cat /etc/os-release
# paste output here
$ uname -a
# paste output here

# On Windows:
C:\> wmic os get Caption, Version, BuildNumber, OSArchitecture
# paste output here

Install tools

Container runtime (CRI) and version (if applicable)

Related plugins (CNI, CSI, ...) and versions (if applicable)